Cyber Security Engineer

About the role

A fast-growing national organisation is looking for a Cyber Security Engineer in North Sydney. The role is hands-on and builds a Microsoft-centric environment, working directly with the CISO. It is a permanent position starting as soon as possible, with hybrid working (3 days in the office, 2 days from home).

Key responsibilities

• Implement and continuously improve security controls across a Microsoft-based environment, covering identity, email and data protection.
• Run day-to-day security operations, with a monthly rotation on SecOps: monitoring, investigating events and responding to incidents.
• Support security due diligence and integration of newly acquired businesses, including 1-2 site visits per month.
• Drive projects such as AI governance, identity and access improvements, and automated detection and response.
• Strengthen defences against emerging threats, including AI-driven attacks, and help roll out an email security gateway.
• Support remediation of vulnerabilities found in scans, penetration tests and audits.
• Engage stakeholders at all levels, from on-site introductions and Q&As to promoting security awareness.

Required profile

• Proven experience in a cyber security engineering role, in-house or within an MSP, ideally 5-10 years across security and IT.
• Strong hands-on experience with Microsoft Entra ID, Defender for Email and Microsoft Purview.
• Background in system administration, working with Azure and Microsoft 365.
• Confident communicator comfortable presenting to and engaging stakeholders.
• Keen learner with a positive, can-do attitude.

Required skills

• Microsoft Entra ID, Defender for Email and Microsoft Purview
• Azure and Microsoft 365
• Microsoft security certifications (SC-300, SC-200, SC-100 or similar) are highly regarded