Security Engineer responsible for designing and optimizing the security platform across on-prem and cloud environments. Collaborates with SOC and IT teams to strengthen security controls efficiently in Sydney, Australia.
Responsibilities
Operate and fine-tune EDR, ensuring high visibility and timely response to detections.
Investigate alerts, triage incidents, and coordinate remediation with IT and engineering teams.
Develop and maintain detection rules, response playbooks, and operational dashboards.
Run regular vulnerability scans across endpoints, servers, and cloud workloads.
Prioritize findings based on exploitability and asset criticality.
Work with system owners to track remediation progress and verify fixes.
Review and improve AWS configurations using AWS tools or CNAPP / CSPM monitoring tools (e.g., Wiz, Orca)
Support secure architecture and IaC practices (Terraform, CloudFormation) with dev teams.
Automate checks and alerting for misconfigurations and policy violations.
Support developers on secure coding practices and pipeline integration (e.g., Snyk).
Review secrets management, API credential handling, and CI/CD pipeline security.
Implement and maintain least privilege and MFA policies across systems.
Assist with SSO/SCIM integrations (e.g., Entra ID, 1Password, Cloudflare Zero Trust).
Work alongside IT Operations and Cloud teams to deploy, harden, and monitor security tools.
Participate in incident response exercises, phishing simulations, and post-incident reviews.
Contribute to process documentation and internal knowledge base (e.g., runbooks, playbooks).
Requirements
**4–6 years of hands-on security experience**, ideally in endpoint protection, cloud security, or vulnerability management.
Strong working knowledge of **AWS security services**, IAM, and network fundamentals.
Practical experience with **EDR tools (CrowdStrike, Defender, etc.)** and vulnerability scanners (Qualys, Tenable, etc.).
Solid understanding of incident response, detection engineering, and access control principles.
Exposure to security frameworks (ISO 27001, SOC 2, NIST) is a plus, but not mandatory.
Clear communicator who can explain security findings to both technical and non-technical teams.
Benefits
Celebrate your tenure with us! Receive generous milestone anniversary gifts that grow with each year of service.
Join a vibrant workplace culture with fantastic team-building activities, fostering camaraderie and collaboration among colleagues.
Cybersecurity Engineer focused on threat monitoring and incident response for Verizon's network security. Collaborating on security architecture and vulnerability management across multiple locations.
Senior Manager of Application Security leading initiatives to protect applications at Nordstrom through strategic leadership and AI - driven tooling. Collaborating with engineering to ensure secure software development practices.
Information Security Engineer responsible for deploying and supporting security tools across cloud and on - premise systems. Collaborating with IT to mitigate security risks in a hybrid work environment.
Casual Retail Security Officer for MSS Security ensuring safety at Tweed Mall in Tweed Heads. Responsible for patrols, incident response, and customer service.
Financial security advisor at Desjardins developing client relationships and selling life and health insurance products. Focusing on customer satisfaction and personalized financial solutions.
Principal Information Security Consultant at Westpac focusing on security protocols and employee benefits for staff. Hybrid role centrally located with opportunities for professional development and employee perks.
Engineer supporting secure development lifecycle processes for product lines in the energy sector. Collaborating with R&D on security requirements and compliance audits.
Automation Oversight Engineer providing oversight of compliance in automated device configurations for Comcast Business. Managing configuration checks and reporting, ensuring reliable oversight and improvement strategies.
Principal Systems Engineer - Cybersecurity role in protecting our nation's products as part of Integrated Platform Solutions team. Develop solutions utilizing RMF, Anti - Tamper, Software Assurance, and more.
Agent de Sécurité assurant la sécurité des usagers du réseau de transport TBM. Rattaché au Manager de Proximité Sûreté, garantissant la qualité de service public de transport en commun.