Senior Cyber Security Engineer

About the role

A growing technology company in the health sector is looking for a hands-on security engineer to act as its main internal technical security contact. The role sits directly under IT and Security leadership and covers SecOps, cloud and SaaS security, incident response and application security. It is based in Sydney with hybrid working in a new office.

Key responsibilities

• Act as the main internal technical security contact, working with an outsourced SOC to investigate, contain and remediate security incidents.
• Own day-to-day vulnerability management across corporate, cloud and SaaS environments, helping teams prioritise and resolve security issues.
• Work with security tooling including CrowdStrike, Sumo Logic, Proofpoint, Okta, Nullify and UpGuard.
• Partner with software engineering and architecture teams to strengthen secure development practices and application security.
• Review new SaaS platforms, vendors and technical solutions from a security perspective, especially where sensitive customer information is involved.
• Help implement technical controls across identity, endpoint security, data protection, cloud security and ISO 27001 readiness.

Required profile

• Hands-on experience in Security Engineering, Security Operations or a similar technical cybersecurity role.
• Broad exposure to areas such as endpoint security, SIEM, vulnerability management, IAM, cloud security or SaaS security.
• Comfortable investigating security issues yourself, rather than working only at an advisory or governance level.
• Exposure to a technology, SaaS or product environment and an understanding of secure development or application security principles.
• Able to work with engineers and business stakeholders, translating security risk into practical actions.

Required skills

• Security operations and incident investigation
• Vulnerability management
• SIEM and IAM
• Cloud and SaaS security
• Application security

The employer offers a broad security environment with meaningful technical ownership, growth in appsec, AI security, cloud security and ISO 27001 alongside experienced specialists, and an inclusive organisation focused on healthcare technology. Candidates can apply through the listing or ask for a confidential discussion.