Security Engineer

About the role

The Security Engineer is a core member of hummgroup’s Cyber Security and Humm 3.0 Transformation program, protecting information and technology assets against evolving threats. You will work hands‑on with modern security tools, collaborate across teams, and directly improve the organisation’s cyber resilience.

Key responsibilities

• Monitor and assess threats, vulnerabilities and events across SIEM, endpoint, network, email, web, DLP and cloud security platforms.
• Investigate incidents, conduct threat hunting, perform root‑cause analysis and translate findings into stronger detection and response.
• Implement, configure and optimise security controls across identity, endpoint, network, application and cloud environments.
• Manage vulnerability scanning, system hardening, attack‑surface reduction and remediation validation.
• Support cyber‑risk assessments, audits and compliance activities for on‑prem, cloud, SaaS and third‑party environments.
• Coordinate security testing, DevSecOps, penetration testing and assurance activities with internal and external partners.
• Produce security dashboards, reports and maintain trusted stakeholder relationships while participating in on‑call rotation as required.

Required profile

• 3+ years of experience in a cyber security role such as Security Analyst or Security Engineer.
• Relevant certifications (e.g., CompTIA CySA+, AWS/Microsoft security certs) or tertiary education in a related field.
• Strong analytical, problem‑solving mindset and ability to work independently in fast‑paced environments.
• Effective communication skills to simplify technical concepts for non‑technical stakeholders.

Required skills

• SIEM platforms, threat hunting and automation.
• Endpoint Detection & Response (EDR), firewalls, proxies, secure web gateways.
• Cloud security (AWS, Azure, Microsoft 365) and DLP solutions.
• Vulnerability scanning, system hardening, attack‑surface reduction.
• DevSecOps pipelines, penetration testing support.
• Knowledge of compliance frameworks (PCI DSS, ASD Essential 8, ISO 27001, NIST).