Triskele Labs is one of Australia's last remaining independent cybersecurity MSSPs. We help organisations reduce the risk of cyber compromise through risk-considered controls, and we do it entirely onshore.
We're the largest CREST Registered Penetration Testing company in Melbourne and one of the only cybersecurity firms running a 24x7x365 Security Operations Team without offshoring a single analyst. We build meaningful relationships with our clients — they're not invoice numbers to us.
About the roleAs a Security Engineer, you'll be an integral part of our Engineering team — deploying and maintaining security solutions for clients and supporting Triskele Labs' own internal infrastructure. You'll work hands-on with SIEM, EDR, Mail Gateway platforms, and you'll be the person who finds solutions when things get complex and non-standard.
This role reports to the Head of Engineering and works closely with our SOC, Advisory, and Offensive teams, as well as directly with clients onsite
What you'll do- Deploy SOC services at client sites, including ad-hoc and non-standard configurations
- Troubleshoot and resolve complex technical issues in SOC environments
- Conduct onsite security assessments and architecture reviews
- Create SOC architecture diagrams for implementation and documentation purposes
- Deploy, manage, and maintain cloud platforms including AWS, Azure, and Microsoft 365
- Support internal systems by providing escalation-level technical assistance
- Deploy internal tools and systems to meet evolving operational needs
- Maintain and secure Triskele Labs infrastructure and SaaS systems
- Drive knowledge sharing and technical uplift within the Engineering team
RequirementsWhat we're looking forEssential skills and experience
- Several years' hands-on experience in a security engineering, SOC engineering, or infrastructure security role
- Practical experience deploying and administering SIEM platforms (e.g. Microsoft Sentinel, Splunk)
- Hands-on EDR experience (e.g. Microsoft Defender for Endpoint, Rapid7 InsightIDR)
- Email security / mail gateway experience (e.g. Mimecast, Microsoft Defender for Office 365)
- Strong cloud skills across Azure and Microsoft 365, with working knowledge of AWS
- A genuine knack for troubleshooting complex, non-standard environments end to end
- The ability to produce clear architecture diagrams and technical documentation
- Confidence working directly with clients — running onsite assessments, reviews, and deployments
- Microsoft SC or AZ suite certifications such as AZ-500 or SC-300 (highly regarded)
- CrowdStrike or Rapid7 certifications
- AWS Administrator certification
- Elastic or Splunk certification
- CompTIA Security+ or CCNA
- Tertiary qualification in a related field
- Competitive salary: $90,000–$120,000 + superannuation, depending on experience
- Full-time, Monday–Friday based at our Collins Street Melbourne office with flexible working arrangements
- Work with genuinely interesting, complex security problems — not cookie-cutter deployments
- A culture built on accountability, honesty, and backing each other — no politics, no blame culture
- Leaders who lead from the front and take responsibility alongside their team
- Occasional travel and client-site work to keep things varied
Full Australian working rights are required for this role.
The interview process is straightforward: an informal chat, followed by a technical interview with the Head of Engineering and a Senior Security Engineer, and a short technical assessment.
Applicant must include a cover letter addressed to our Head of Engineering, Joseph Suric. Applications without a cover letter will not be considered.
Benefits
Skills Required
- Several years' hands-on experience in a security engineering, SOC engineering, or infrastructure security role
- Practical experience deploying and administering SIEM platforms (e.g. Microsoft Sentinel, Splunk)
- Hands-on EDR experience (e.g. Microsoft Defender for Endpoint, Rapid7 InsightIDR)
- Email security / mail gateway experience (e.g. Mimecast, Microsoft Defender for Office 365)
- Strong cloud skills across Azure and Microsoft 365, with working knowledge of AWS
- Ability to troubleshoot complex, non-standard environments end to end
- Ability to produce clear architecture diagrams and technical documentation
- Confidence working directly with clients, including running onsite assessments, reviews, and deployments
- Full Australian working rights
- Cover letter addressed to the Head of Engineering (applications without a cover letter will not be considered)
- Microsoft SC or AZ certifications such as AZ-500 or SC-300
- CrowdStrike or Rapid7 certifications
- AWS Administrator certification
- Elastic or Splunk certification
- CompTIA Security+ or CCNA
- Tertiary qualification in a related field
What We Do
Triskele Labs is one of Australia’s fastest growing cybersecurity companies. We deliver services including traditional projects such as Penetration Testing, Compliance and Risk Management through to new breed services including 24*7*365 Security Operations and outsourced Cybersecurity Managers to ensure we are a complete cybersecurity solution centre. Our team of experts leverage elite threat intelligence to provide the highest level of cybersecurity professional services. We go the extra mile to demystify cybersecurity and become your trusted partner by developing customised programs that deliver on your specific needs to meet your budget. Our holistic approach allows us to achieve multiple point security solutions to protect your IT infrastructure against the global threat landscape. We are continually improving to deliver whatever it takes through a customer focused partnership where honesty, integrity and passion drive everything we do. We believe in delivering robust outcomes and solutions that defend, protect and manage your networks and systems to significantly mitigate your risks.
