Cybersecurity Engineer

Triskele Labs is one of Australia's last remaining independent cybersecurity MSSPs. We help organisations reduce the risk of cyber compromise through risk-considered controls, and we do it entirely onshore.

We're the largest CREST Registered Penetration Testing company in Melbourne and one of the only cybersecurity firms running a 24x7x365 Security Operations Team without offshoring a single analyst. We build meaningful relationships with our clients — they're not invoice numbers to us.

About The Role

As a Security Engineer, you'll be an integral part of our Engineering team — deploying and maintaining security solutions for clients and supporting Triskele Labs' own internal infrastructure. You'll work hands-on with SIEM, EDR, Mail Gateway platforms, and you'll be the person who finds solutions when things get complex and non-standard.

This role reports to the Head of Engineering and works closely with our SOC, Advisory, and Offensive teams, as well as directly with clients onsite

What you'll do

Deploy SOC services at client sites, including ad-hoc and non-standard configurationsTroubleshoot and resolve complex technical issues in SOC environmentsConduct onsite security assessments and architecture reviewsCreate SOC architecture diagrams for implementation and documentation purposesDeploy, manage, and maintain cloud platforms including AWS, Azure, and Microsoft 365Support internal systems by providing escalation-level technical assistanceDeploy internal tools and systems to meet evolving operational needsMaintain and secure Triskele Labs infrastructure and SaaS systemsDrive knowledge sharing and technical uplift within the Engineering team

Requirements

What we're looking forEssential skills and experience

Several years' hands-on experience in a security engineering, SOC engineering, or infrastructure security rolePractical experience deploying and administering SIEM platforms (e.g. Microsoft Sentinel, Splunk)Hands-on EDR experience (e.g. Microsoft Defender for Endpoint, Rapid7 InsightIDR)Email security / mail gateway experience (e.g. Mimecast, Microsoft Defender for Office 365)Strong cloud skills across Azure and Microsoft 365, with working knowledge of AWSA genuine knack for troubleshooting complex, non-standard environments end to endThe ability to produce clear architecture diagrams and technical documentationConfidence working directly with clients — running onsite assessments, reviews, and deployments

Preferred certifications (not mandatory)

Microsoft SC or AZ suite certifications such as AZ-500 or SC-300 (highly regarded)CrowdStrike or Rapid7 certificationsAWS Administrator certificationElastic or Splunk certificationCompTIA Security+ or CCNATertiary qualification in a related field

Why Triskele Labs

Competitive salary: $90,000–$120,000 + superannuation, depending on experienceFull-time, Monday–Friday based at our Collins Street Melbourne office with flexible working arrangementsWork with genuinely interesting, complex security problems — not cookie-cutter deploymentsA culture built on accountability, honesty, and backing each other — no politics, no blame cultureLeaders who lead from the front and take responsibility alongside their teamOccasional travel and client-site work to keep things varied

How to apply

Full Australian working rights are required for this role.

The interview process is straightforward: an informal chat, followed by a technical interview with the Head of Engineering and a Senior Security Engineer, and a short technical assessment.

Applicant must include a cover letter addressed to our Head of Engineering, Joseph Suric. Applications without a cover letter will not be considered.