Senior Cyber Security Engineer (Contract) - Melbourne, Adelaide

About the role

Hastha Solutions is recruiting a Senior Cyber Security Engineer on a 6-month contract, with possible extension, based in Melbourne and Adelaide. The role delivers cyber engineering services that protect business operations and align with risk appetite, safety requirements and regulatory obligations, partnering with Operations, IT, Networks, Projects and Engineering. It covers IT, OT, AI and IoT systems, and is open to Australian and NZ citizens and PR holders only.

Key responsibilities

• Design, implement and support security controls across IT, OT, AI and IoT systems, including firewalls, SASE/SSE, EDR/XDR, SIEM/SOAR, IAM, encryption and industrial security platforms
• Implement secure network segmentation in OT environments (DMZs, zone/conduit models, vendor remote access) and embed DevSecOps in CI/CD pipelines (SCA, SAST/DAST, secrets management)
• Perform risk assessments, threat modelling, vulnerability analysis and configuration compliance reviews; support AESCSF maturity and compliance with ISA/IEC 62443, NIST CSF, ASD Essential 8 and the CI Act
• Act as an Incident Handler in the CSIRT, supporting containment, forensics and recovery, maintaining IR playbooks and contributing to tabletop and purple-team exercises
• Integrate threat intelligence into engineering, monitoring and incident response, and track OT/ICS threat trends
• Contribute to cyber security architecture patterns and design reviews for IT, OT, IoT and cloud, and drive continuous improvement of security processes and standards

Required profile

• Bachelor's degree in cyber security, IT, engineering or a related field
• Industry certification such as CISSP or equivalent
• Minimum 6+ years of cyber security engineering experience across IT and/or OT environments
• Demonstrated experience with AESCSF, ISA/IEC 62443, ASD Essential 8 or NIST frameworks
• Hands-on experience in OT/ICS environments (SCADA, DCS, PLCs, industrial networks, safety systems) and with distributed industrial sites or critical infrastructure
• Experience providing thought leadership or mentoring in cyber security

Required skills

• Application whitelisting, SASE, firewalls, proxy, email filtering, anti-malware, DLP, cloud platforms
• DevSecOps, automation and orchestration tools
• Vulnerability management, web application security, API security, Zero Trust, PAM, NDR, UEBA, network-based encryption
• Microsoft (Azure, O365), Linux (Red Hat) and mobile platforms (iPhone and Android)