Cyber Security Architect

About Us

Macquarie Cloud Services are the Australian specialists in cloud services for business and government. Locally owned and operated, with an industry-leading customer service model, we’re trusted by our customers to provide the services that enable their business success.

We have made it our challenge to make our people feel good and love the work they do. Because of this, our people are energised and motivated in their work.

In this role, you will be responsible for defining and evolving the technology, platforms, use cases and processes that power Macquarie Cloud Services' Security Operations Centre (SOC). As the Cyber Security Architect, you will provide the technical vision and leadership that enables our SOC to detect, respond to and remediate cyber threats at scale across a diverse customer base.

You will act as the technical authority across our Managed Security Practice, guiding security analysts, engineers and stakeholders while continuously improving our managed security services. Working closely with Product, Operations and Engineering teams, you will help shape our security strategy, evaluate emerging threats, design new capabilities and ensure our customers remain protected in an ever-evolving threat landscape.

You'll combine strategic thinking with hands-on technical leadership, contributing to architecture, detection engineering, threat management, security automation and service innovation. Whether developing new security use cases, evaluating Microsoft security technologies or mentoring the next generation of security professionals, you'll play a key role in strengthening Macquarie's position as a leader in managed security services.

Define the strategy, technology roadmap, platforms and operational processes that underpin Macquarie's Security Operations Centre (SOC).

Design and evolve managed security services including SIEM-as-a-Service, Extended Detection & Response (XDR), Global Secure Access and Microsoft Security solutions.

Act as the technical authority for the Microsoft Security stack, including Microsoft Sentinel, Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Entra ID and Zero Trust architectures.

Design, enhance and continuously improve security use cases, detections, dashboards, playbooks and response workflows to improve threat detection, response and operational effectiveness.

Provide guidance to customers on security strategy, cyber maturity and security framework alignment, including the ACSC Essential Eight, NIST, ISM and ISO27001.

Provide architectural leadership and technical guidance to SOC analysts, security engineers and other technical stakeholders.

Evaluate emerging threats, vulnerabilities and security advisories, assessing the impact on customer environments and recommending mitigation strategies.

Drive continuous improvement across security monitoring, threat detection, automation and incident response through innovation and operational excellence.

Support customer engagements, technical workshops, solution design discussions and strategic security conversations.

Collaborate with Product, Operations and Engineering teams to shape the future direction of Macquarie's Managed Security Practice.

Mentor and develop team members, fostering a culture of learning, innovation and technical excellence.

Significant experience in Cyber Security Architecture, Security Engineering or a senior technical security leadership role.

Strong architecture and solution design experience across enterprise, MSP, consulting or vendor environments.

Deep expertise across the Microsoft Security stack, including Microsoft Sentinel, Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Entra ID, Global Secure Access and Zero Trust principles.

Strong hands-on experience building and optimising Microsoft Sentinel detections, analytics rules, workbooks, automation and SOC processes.

Strong understanding of Security Operations Centre (SOC) design, detection engineering, threat management and security operations processes.

Hands-on experience with enterprise SIEM platforms and modern security operations practices.

Experience designing security use cases, response playbooks, automation opportunities and operational frameworks.

Strong understanding of cyber threats, adversary tactics and security frameworks including ACSC Essential Eight, NIST, ISO27001, ISM, SABSA or TOGAF.

In-depth networking knowledge across Layers 3-7, including protocols such as HTTP, HTTPS and SMTP.

Experience with scripting, automation and analytics technologies including KQL, Python, PowerShell or similar.

Excellent stakeholder engagement and communication skills, with the ability to influence both technical and non-technical audiences.

A passion for Cyber Security, innovation and continuous improvement.

Proven ability to mentor and uplift technical teams within a high-performing environment.

Australian Citizenship and the ability to obtain and maintain an NV1 Security Clearance.