Information Security/Cybersecurity Operations Specialist

About the role

Join HESTA’s growing Information Security/Cybersecurity team to strengthen cyber resilience. You will lead day‑to‑day security monitoring, threat detection, investigation and response, focusing on Data Loss Prevention, insider risk and emerging AI threats.

Key responsibilities

• Monitor, triage and investigate security alerts and incidents, supporting containment, eradication and recovery.
• Operate and continuously improve DLP and insider risk controls, including investigation, tuning and exception management.
• Detect and respond to AI‑related security threats such as shadow AI, data leakage, and prompt injection.
• Conduct threat hunting and intelligence activities aligned to MITRE ATT&CK and emerging threats.
• Support digital forensics and incident response activities.
• Develop and tune SIEM/SOAR detection content and optimise SOC security platforms.
• Partner with internal teams, MSSP/MDR providers and external security partners to strengthen cyber resilience.

Required profile

• Experienced Cybersecurity/Security Operations professional with hands‑on experience across DLP, security monitoring, incident response and threat detection.
• Strong understanding of SIEM/SOAR, threat hunting and detection engineering.
• Experience securing or monitoring generative and agentic AI, including data leakage and prompt injection (highly regarded).
• Experience working with MSSP/MDR or outsourced security partners.
• Knowledge of cloud, identity and access security and contemporary cyber security frameworks.
• Understanding of Australian regulatory environment, particularly CPS 234, CPS 230 and privacy requirements.

Required skills

• Data Loss Prevention (DLP)
• SIEM and SOAR platforms
• Threat hunting and MITRE ATT&CK methodology
• AI security (generative AI, prompt injection, shadow AI)
• MSSP/MDR coordination
• Cloud security
• Identity and access security

What we offer

• Additional 6 days of leave at year‑end, up to 6 days paid volunteer leave, gender‑neutral parental leave (20 weeks), gender affirmation leave, reproductive health and wellbeing leave, cultural and ceremonial leave.
• Professional development budget up to $5,000 per year and up to 8 days development leave, scholarships and free access to premium learning tools.
• Health and wellbeing benefits including free annual flu shots, skin checks, social events and 24/7 employee assistance program.
• Financial wellbeing benefits such as up to 15% superannuation, financial planning support, end‑of‑year payment, employee referral program and novated lease options.