Cyber Defence Analyst
Medibank · Posted 2 days ago
About the role
analysts and specialists, you'll contribute to the effectiveness and reliability of the cyber defence function while continuing..., while helping shape a healthier future for our customers, patients and communities. We're looking for a Cyber Defence Analyst
Cyber Security Analyst / Assessor
Hays · Posted 6 days ago
About the role
Your new company Join a leading Victorian State Government Agency delivering a critical Cyber Resilience Program aimed... at strengthening cyber security capabilities across a large and complex environment. They are investing heavily in secure digital
Senior Analyst | Controls Assurance - Internal Audit | Melbourne
Deloitte · Posted 10 days ago
About the role
, controls assurance and advisory work that surfaces risk before it becomes a bigger issue. Tackle big issues like cyber, trust
Salesforce Systems Administrator
DFP Recruitment · Posted 15 days ago
About the role
for Salesforce projects and work with team members including Developers, Testers, Project Managers, Cyber Security, Architects... and Business Analysts Essential criteria Certified Salesforce Administrator with a minimum of 2 years' experience within the
SOC Analyst (Level 1, 2 & 3) - MSSP - Leading Cyber Security Provider
Saul Recruitment · Posted 16 days ago
About the role
Saul Recruitment - Specialising in recruiting top Cyber Security talent across Oz & NZ! Looking for a role... where you can build your cyber security career, work alongside experienced professionals and help protect organisations from real
Senior Cyber Security Analyst
Service Stream · Posted 21 days ago
About the role
Senior Cyber Security Analyst to join our growing Cyber Security team. This role is ideal for a security professional who..., and continuous improvement. As a senior member of the team, you will provide technical leadership, mentor junior analysts
Senior Analyst - Conduct & Compliance Monitoring
Deloitte · Posted 26 days ago
About the role
. Tackle big issues like cyber, trust, resilience and digital transformation Mentoring, coaching and leadership programs... completion and promote sustainable ownership of compliance controls. Support and coach analysts or other team members
Senior Cyber GRC Analyst
REA Group · Posted 27 days ago
About the role
Join a collaborative team that enables REA to manage cyber risk confidently while supporting secure business growth... Lead cyber security risk assessments across products, platforms and key initiatives Permanent role based in Melbourne
Cyber Security Analyst
Specialized Bicycle Components · Posted 32 days ago
About the role
Cyber Security Analyst About the Role The Cyber Security Analyst helps protect Specialized by monitoring security
Systems Analyst
GoSourcing · Posted 33 days ago
About the role
. Senior Systems Analysts are responsible for translating business needs into ICT system requirements and specifications... knowledge of the department’s software development lifecycle, tools, services, deployment procedures and cyber security policies
Security Operations Centre Manager
Triskele Labs · Posted 33 days ago
About the role
Triskele Labs is one of Australia’s leading sovereign cyber security firms, delivering Managed Detection & Response... Engineering owns what the service can detect, hunt and validate: detection engineering, cyber threat intelligence, threat hunting
Digital Forensics Analyst
Triskele Labs · Posted 33 days ago
About the role
Triskele Labs is an Australian cyber security firm delivering Managed Detection and Response, Governance Risk... and Compliance, Penetration Testing, and Digital Forensics and Incident Response. We hold CREST Cyber Security Incident Response
EL1 Manager Delivery
Softtestpays · Posted 36 days ago
About the role
works in close partnership with EL1 Lead Data Scientists, the Data Science & AI Engineering Lead, Business Analysts, Data... and scoping Lead and guide Business Analysts, data scientists and stakeholders to identify the why and what of complex business
Cyber Security & GRC Analyst
David Jones · Posted 37 days ago
About the role
Protect what matters. Strengthen cyber resilience. Help shape a security-conscious culture. At David Jones..., we are committed to creating secure, seamless and trusted experiences for our customers and our people. We are looking for a Cyber
EL1 Senior Salesforce Infrastructure Engineers
Softtestpays · Posted 58 days ago
About the role
projects and work with team members including Developers, Testers, Project Managers, Cyber Security, Architects and Business... Analysts.
Senior Security Operations Analyst
DLA Piper · Posted 62 days ago
About the role
This is an exciting opportunity for an experienced cyber security professional to join a global Security Operations... and response to cyber security incidents while helping enhance security operations capabilities across the business. Working
Security GRC Analyst
Hays · Posted 62 days ago
About the role
Your new company Join a well-established Australian organisation undergoing an exciting cyber security uplift journey... posture and embedding best-practice cyber security frameworks across the business. You'll work alongside senior leadership
Business Analyst
Akkodis · Posted 68 days ago
About the role
across IT, Cyber Security, Architecture, and Governance · Communicate process changes and documentation updates effectively
Cyber Security - Analyst / Assessor
Michael Page · Posted 82 days ago
About the role
Contract role with hybrid working Opportunity to work on exciting Cyber Project About Our Client This role... to support remediation activities The Successful Applicant A successful Cyber Security - Analyst / Assessor
Analyst Senior, Cybersecurity
FIS · Posted 85 days ago
About the role
across business and technical stakeholders, understands cyber risk and control expectations, and can bring structure, clarity... against cybersecurity obligations and agreed commitments. Work along with the team to help drive consistent cyber risk management
Cyber Incident Response Analyst
Department of Government Services · Posted today
About the role
About Us The Department of Government Services (DGS) was established on 1 January 2023 to improve everyone's experience of doing business and interacting with the Victorian government. We bring important day-to-day services together in one department to make things easy and seamless for Victorians and businesses. We are doing this by connecting and digitising our systems and platforms across state and local government as well as streamlining our corporate and procurement services. The Digital and Government Services group Digital and Government Services support the Minister for Government Services and help to set the strategic direction and reform agenda for government services across the Victorian Public Service. Digital and Government Services provide whole of government policy leadership across digital services and transformation, technology, data, cybersecurity, telecommunications, identity policy, records management and shared services (such procurement, accommodation and common platforms). The group engages with DGS’s customer departments and agencies, as well as other departments and agencies, to help shape the priorities of the department and deliver reform. The Cyber Security and Digital Resilience Division The Cyber Security and Digital Resilience Division (CSDRD) is responsible for leading and overseeing government’s digital resilience, and preparedness and response to cyber security risks, including: · Leading the Victorian Government’s cyber security operations · Working with departments and agencies to continue to build the Victorian Government’s cyber security resilience capability · Working with departments and agencies to improve the protection of data assets across the Victorian Public Sector · Shaping whole of government governance arrangements, developing best practice, and providing assurance about the management of cyber security and data protection risks · Improving the resilience of Victoria’s telecommunications infrastructure to support digital resilience and inclusion About the role The Cyber Incident Response Analyst supports the investigation and remediation of cyber security incidents affecting the Victorian Government, providing sound advice and guidance on the containment, eradication, investigation and remediation of cyber security incidents. This role is required to investigate information, analyse and resolve cyber incidents, and support senior practitioners with incident response activities for major to emergency level cyber incidents impacting Victorian government organisations. The position participates in an on-call roster and requires the ability to perform intermittent after-hours work. The position requires initiative, professional drive and integrity - including the ability to manage competing deadlines during periods of heightened operational tempo. A successful candidate will have basic knowledge and exposure to digital forensics and incident response (DFIR). Key Accountabilities Assist the technical response and investigation into cyber security incidents affecting Victorian Government organisations in partnership with government and private industry stakeholders. Support whole-of-government coordination functions to achieve timely and effective responses to cyber security incidents affecting Victorian Government organisations. Assist with the development of advice to stakeholders on effective risk mitigation and incident response strategies to minimise harm to the Victorian Government. Contribute to the continuous improvement of team plans, policies and procedures relating to cyber threat intelligence and incident response functions. Establish and maintain productive working relationships with cyber security stakeholders across government and private industry nationally. Support DGS in performing its emergency management functions as the Control Agency for cyber security emergencies in Victoria. Participate in an on-call roster and undertake intermittent after hours work in relation to cyber security incidents or threats against Victorian Government. Other duties as directed that are not listed in the position description, but which are consistent with a position of this grade and skills requirement. Mandatory requirements The ability to successfully acquire and maintain a NEGATIVE VETTING 1 level security clearance in Australia (requires Australian citizenship). Participation in an on-call roster and the ability to perform intermittent after-hours work in response to incidents or emergencies. This is an ongoing position. The position is only open to applicants with relevant rights to work in Australia. For more information and the key selection criteria, please see the Position Description. How to apply : Apply before the advertised closing date 11:59pm on Wednesday, 11 November 2026 . All applications should include: a resume; and a cover letter which addresses the key selection criteria (within three pages). Other relevant information: To be eligible for appointment to this role, applicants will possess corresponding work rights for the advertised employment period. Appointment to an ongoing role is only available to an Australian/New Zealand citizen or an Australian Permanent Resident. Preferred candidates will be required to complete a Pre-employment Declaration and Consent Form. Employment of successful candidates will be subject to a National Police Check. The department is committed to providing and maintaining a working environment which is safe and without risk to the health of its employees and clients and consistent with the department's obligations under the Occupational Health and Safety Act 2004 (OH&S Act), to support this DGS has a COVID-19 Vaccination policy which strongly recommends all DGS employees be fully vaccinated. DGS actively promotes diversity, inclusion and an equal opportunity workplace. All roles at DGS can be worked flexibly, however it may differ from role to role.
Multiple Senior Cyber Operations Analyst ASP6-EL1
Hunter Professional · Posted 2 days ago
About the role
22nd October, 2026 Senior Cyber Security Operations Analysts (APS6/EL1) – Federal Government | ACT, NSW, VIC or QLD Multiple roles | 12-month initial contract, with two 12-month extension options | Hybrid | NV1 clearance required Hunter Professional is looking for experienced Senior Cyber Security Operations Analysts to join a Federal Government department’s Cyber Operations team. Working in a Microsoft-focused environment, you’ll lead incident response and threat hunting and help improve security operations across Azure and on-premises systems. What you’ll do Lead investigations and responses to cyber incidents, from evidence collection and containment through to recovery Carry out proactive threat hunting using Microsoft Sentinel and Defender XDR Act as the technical lead across Sentinel, Defender for Endpoint, Purview and Entra ID Improve detection content, telemetry, automation and incident response playbooks Work with the managed SOC provider and review and validate its outputs Coach analysts and quality-assure investigations and recommendations Give practical, risk-based advice on vulnerability management and governance, risk and compliance (GRC) What you’ll bring Strong experience in cyber security operations, including monitoring, triage, incident response, threat hunting and complex investigations Hands-on experience with Microsoft Sentinel, Defender XDR, Defender for Endpoint, Purview and Entra ID A track record of improving detection, processes, automation and workflows alongside SOC providers and technical teams Experience in Australian Government environments, including the PSPF, ISM and Essential Eight (desirable) Certifications such as SC-200, SC-300, SC-401, AZ-500, CISSP, GCIH, GCIA, GCFA or CySA (highly regarded) The ability to obtain a Negative Vetting Level 1 (NV1) clearance How to apply: Click “Apply” and submit your resume.
Cyber Security Analyst - Azure
e2e · Posted 5 days ago
About the role
21st October, 2026 An established Australian organisation operating critical infrastructure and complex operational environments is seeking a Cyber Security Analyst to join its technology team. This is a newly created position offering the opportunity to help shape and mature cyber security capabilities across corporate IT, Operational Technology (OT) and Internet of Things (IoT) environments. Working closely with the Enterprise Infrastructure Manager, you will play a key role in strengthening security controls, managing risk, improving resilience and supporting critical business operations. About the Role As the Cyber Security Analyst, you will be responsible for the design, implementation and ongoing support of cyber security controls across a diverse technology landscape. You will work across security engineering, vulnerability management, compliance, incident response and continuous improvement initiatives, helping to build a robust and scalable cyber security capability. Key Responsibilities Security Engineering & Operations Design, implement and maintain cyber security controls across IT, OT and IoT environments. Deploy, configure and support security technologies including EDR, IAM, firewalls, SASE, encryption and endpoint security solutions. Integrate security controls into infrastructure, cloud and application environments. Support DevSecOps initiatives and embed security into development and deployment processes. Leverage automation and orchestration to improve security operations and compliance. Risk, Compliance & Governance Conduct cyber security risk assessments, vulnerability management activities and security reviews. Support compliance with recognised frameworks including Essential Eight, NIST, ISA/IEC 62443 and AESCSF. Assist with the development and implementation of cyber security standards, policies and controls. Ensure security practices align with organisational risk and regulatory requirements. Incident Response & Threat Management Participate in cyber security incident response activities and investigations. Act as a key member of the Cyber Security Incident Response Team (CSIRT). Support business continuity, disaster recovery and resilience initiatives. Incorporate threat intelligence into security operations to proactively identify and mitigate emerging risks. Continuous Improvement Drive improvements in cyber security tooling, processes and operational maturity. Enhance monitoring, detection and response capabilities through automation. Stay current with emerging threats, technologies and industry best practices. Provide security guidance and mentoring to technical and business stakeholders. Skills & Experience Essential Strong knowledge of cyber security principles, frameworks and best practices. Hands-on experience with key security technologies including: Endpoint Detection & Response (EDR) Identity & Access Management (IAM) Firewalls and network security SASE solutions Data Loss Prevention (DLP) Email security and anti-malware technologies Experience with vulnerability management, security assessments and risk remediation. Exposure to Zero Trust security models, PAM, NDR, UEBA and application security. Strong understanding of Microsoft Azure and Microsoft 365 security. Knowledge of Linux environments and enterprise mobility platforms. Excellent communication, stakeholder engagement and problem-solving skills. Ability to assess, communicate and manage cyber security risks. Highly Regarded Experience working within Operational Technology (OT), industrial or critical infrastructure environments. DevSecOps, automation and orchestration experience. Exposure to cloud security and infrastructure security engineering. Experience mentoring or providing technical leadership within security teams. Qualifications Degree in Cyber Security, Information Technology, Engineering or a related discipline, or equivalent practical experience. Industry certifications such as CISSP, CISM, Security, Azure Security, GIAC or equivalent will be highly regarded. Minimum 3 years' experience in cyber security-focused roles. Demonstrated experience working with frameworks such as Essential Eight, NIST, ISA/IEC 62443 or AESCSF. If you're a hands-on Cyber Security professional looking for an opportunity to make a significant impact and help shape the future security posture of a complex organisation, we'd love to hear from you.
Cyber Security Analyst / Assessor
Hays · Posted 5 days ago
About the role
Are you a seasoned GRC professional with ample TPRM experience? Maybe this role is for you! Your new company Join a leading Victorian State Government Agency delivering a critical Cyber Resilience Program aimed at strengthening cyber security capabilities across a large and complex environment. They are investing heavily in secure digital services and is seeking an experienced security professional to help assess and manage risks associated with third-party suppliers, cloud platforms, SaaS solutions, and AI-enabled technologies. Your new role As a TPRM Security Analyst, you will play a critical role in evaluating the security posture of suppliers, products, cloud services, and emerging AI solutions. You will conduct detailed security assessments, identify risks and control gaps, validate supplier evidence, and provide clear recommendations to support informed risk-based decisions.Key responsibilities include: Conducting security assessments of suppliers, cloud platforms, SaaS products, and AI-enabled solutions. Reviewing security architecture, data flows, and technical configurations. Assessing identity and access management, APIs, encryption, logging, network security, vulnerability management, and tenant isolation controls. Evaluating AI-related security risks, including LLM providers, model training, data retention, prompt handling, embeddings, RAG architectures, AI agents, and third-party subprocessors. Reviewing supplier evidence such as certifications, penetration testing reports, architecture diagrams, and security documentation. Documenting security risks, treatment plans, control gaps, and residual risk assessments. Providing approval, conditional approval, exemption, or non-approval recommendations. Presenting assessment outcomes to governance forums and senior stakeholders. Collaborating closely with Procurement, Legal, Privacy, Technology, and Information Security teams. Coordinating and quality-assuring assessments delivered by external security providers. What you'll need to succeed To be successful in this role, you will have: Demonstrated experience in Third-Party Risk Management (TPRM), supplier assurance, security governance, or product security assessments. Strong knowledge of cloud, SaaS, API, identity, and technical security controls. Experience assessing Azure, AWS, or multi-tenant cloud environments. Understanding of Generative AI architectures and associated cyber security risks. Experience validating supplier security controls through evidence-based assessments. Strong analytical thinking, risk assessment, report writing, and stakeholder engagement skills. The ability to work independently, manage competing priorities, and deliver outcomes within agreed timeframes. Experience working within government, education, financial services, or other regulated industries. Knowledge of security frameworks and standards such as VPDSS, ISO 27001, SOC 2, NIST, ISM, PSPF, and Essential Eight. Relevant cyber security, risk, audit, governance, or cloud certifications. What you'll get in return Work within a highly visible and strategically important government initiative. Collaborative and supportive team environment. Flexible working arrangements and a strong focus on professional development. What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now. If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion on your career. Hays appreciates the importance of workforce diversity and inclusion. We are an equal-opportunities employer and have policies, procedures and relationships in place to promote our understanding of all forms of diversity. 3024851
Senior Data Security Analyst | Cyber Security | Telecommunications
First Recruitment International · Posted 7 days ago
About the role
In short: A senior data security role within the information security function of a major Australian telecommunications business, running data security posture management, data loss prevention, classification and assurance across a complex regulated environment. 4–5 years in cyber security covering data governance, data protection or operational assurance required. D’Arcy Weil is recruiting a Senior Data Security Analyst on behalf of a major Australian telecommunications business. The role sits within information security and holds accountability for how sensitive data is protected, monitored and governed across the business, including: Designing, deploying and running data security posture management capabilities with technology vendors Tracking data security vulnerabilities and industry practice, and recommending improvements Working with data custodians to validate how data is classified and handled Connecting data security tooling to event monitoring, with dashboards and alerts that surface access to sensitive data Maintaining records of how third parties use company data, and supporting compliance with contractual and regulatory security requirements Gathering evidence for risk reviews and assurance reporting, and coordinating data security incidents It suits a security professional who can configure the tools, understand the regulatory obligations and explain the risk to people outside the security team. The Role Posture management: Lead the design, deployment and ongoing operation of data security posture management capabilities, working with technology vendors to strengthen platforms, integrations and risk controls Threat awareness: Track developments in data security vulnerabilities and industry practice, assess their relevance to the business and recommend improvements to the overall security position Data classification: Work with business data custodians to review and validate how data is categorised and handled, and confirm that practice reflects regulatory obligations and internal standards SIEM integration: Connect data security systems to event monitoring tools, and build dashboards and alerts that surface access to sensitive data and support compliance reporting Asset and third party records: Work with IT service management colleagues to keep configuration data in asset management systems accurate, and maintain records of how external parties use company data Risk and assurance: Gather and assess evidence for risk reviews, assurance reporting and governance forums, communicate data security risk clearly to stakeholders and help close compliance gaps Incident coordination: Manage data security incidents within the data governance remit, including logging, evidence collection and remediation tracking, and build security awareness across the workforce About You 4–5 years in cyber security covering data governance, data protection or operational assurance in a regulated environment A tertiary qualification in cyber security, information technology or a related discipline, or an equivalent industry credential Hands-on experience with data loss prevention technologies, security control configuration and operational risk assessment Strong communication, able to explain technical concepts to non-technical audiences Knowledge of data classification, access controls and how data security, privacy and records management intersect Experience with ISO 27001, cyber security frameworks and cloud security advantageous What’s on Offer Base of $125,000 to $150,000 plus superannuation and performance bonus Ownership of data security posture across a complex, regulated telecommunications environment Hands-on work with data loss prevention, SIEM and posture management tooling Discounted employee products and services, and flexible working arrangements Structured career development and certification support within a large, well-resourced business Apply with a CV and a brief profile covering: The data security, data protection or data governance work you have delivered Your hands-on experience with data loss prevention and security control configuration Your experience with ISO 27001, cyber security frameworks or cloud security For a confidential discussion, or for more information, contact: Ivan Pignataro | Director D’Arcy Weil M: 0416 507 856 E: [email protected] Only candidates with current Australian working rights will be considered. All applications and enquiries will be treated in strict confidence. DataSecurity CyberSecurity DataProtection DLP InfoSec Telecommunications ITJobs SecurityJobs
Cyber Security Manager - Country Road Group
Country Road Group · Posted 7 days ago
About the role
At Country Road Group, our Group Functions sit at the heart of our business, driving the success of our portfolio of distinctive brands and enabling them to do what they do best. Working across the business, you will play a vital role in shaping how we operate, grow, and innovate, bringing our strategy to life. As the Cyber Security Manager, you will lead the cyber operational and engineering capability that protects Country Road Group’s systems and data. Reporting directly to the Head of IT: Enabling Platforms & Operations, you will lead our Cyber Security Analyst and Engineer, oversee security monitoring and incident response, and own the architecture and engineering roadmap for our core security controls and platforms. This is a hands-on, solutions-focused cyber leadership role. We are looking for someone with a strong technical foundation in cyber security who has built their career through security operations, engineering or architecture and is now ready to combine that technical expertise with people leadership, vendor management and broader business influence. You will be comfortable getting into the technical detail, taking ownership of security challenges and working within a complex and fast-paced environment to turn cyber risks into practical solutions. How You Will Contribute Lead, mentor and develop our cyber security team, overseeing the triage, investigation and response to security incidents and alerts Own the architecture and engineering roadmap for core security platforms, including MDR, XDR, SIEM, vulnerability management, email security and cloud security Develop and continuously improve incident response plans and playbooks, taking the lead during significant security incidents Drive improvements to detection and response capability in partnership with our outsourced MDR provider Design and implement scalable security controls and reference architectures across CRG’s evolving technology environment Take ownership of security vulnerabilities and technical risks, working with technology teams to develop and implement practical solutions Manage key security vendors and technology partners across performance, SLA’s, licensing, costs and ongoing service delivery Conduct IT security risk assessments and translate technical findings into clear, actionable recommendations for senior business leaders Partner with technology teams and senior stakeholders on security architecture, engineering decisions, technical trade-offs and cyber risk Partner with Risk & Governance teams on requirements such as PCI-DSS, ensuring compliance requirements translate into effective technical controls Maintain current knowledge of the cyber threat landscape and emerging technologies, continuously identifying opportunities to strengthen CRG’s security posture. Capabilities We Value 5 years’ experience in Cyber Security, with a strong technical background across security operations, engineering and/or architecture Demonstrated career experience working hands-on with cyber security technology, with subsequent progression into a lead, manager or senior technical role Strong knowledge of security architecture and engineering across areas such as network security, cloud security, endpoint/EDR and identity and access management Experience designing, implementing or maturing security tooling and controls such as MDR, XDR, SIEM and vulnerability management Strong incident response capability, including investigating security events, developing response playbooks and leading the resolution of significant incidents A solutions-focused mindset with the ability to move beyond identifying risk to designing and implementing practical solutions Demonstrated ability to lead, mentor and develop technical cyber security professionals Strong vendor management capability, including experience managing technology partners, service performance, SLA’s, licensing and commercial considerations Ability to translate complex technical risks into clear, business-relevant recommendations and influence senior stakeholders Working knowledge of frameworks such as ISO/IEC 27001/2, NIST, CIS and MITRE ATT&CK, with relevant cyber security or cloud certifications highly regarded Tertiary qualifications in Cyber Security, Computer Science, Information Technology, Engineering or a related discipline Retail experience and exposure to PCI-DSS would be advantageous, however we welcome experienced cyber security professionals from other complex technology environments. What We Offer Bi-annual product allowance, access to sample sales and 40% discount for you and your immediate family across all CRG brands Flex your leave your way, including birthday leave, volunteer leave, personal leave and more Access to health and wellbeing support, including Health Insurance, 24/7 EAP counselling, discounted gym memberships and financial advice services 18 weeks paid parental leave program for eligible employees with return-to-work clothing allowance Internal career opportunities across our brands Annual learning calendar to support your ongoing development Support impactful community and charity partnerships across our brands, including OCRF, Our Watch, First Nations Reconciliation, Movember, Red Cross and Landcare. Who We Are Country Road Group is a design-led portfolio of premium fashion brands, comprising five iconic labels: Country Road, Mimco, Trenery, Witchery and Politix. Each brand has its own story, and together they hold a market-leading position in the mid to upper tier of Australia's specialty fashion segment with a focus on delivering our ambition to build a portfolio of distinctive brands that drive sustainable growth. Country Road Group is part of Woolworths Holdings Limited (South Africa), a leading Southern Hemisphere retail group. We encourage you to explore our Current Opportunities and we look forward to connecting with you! Country Road Group acknowledges the Traditional Owners of Country throughout Australia and recognises their continuing connection to lands, waters and communities. We pay our respects to Aboriginal and Torres Strait Islander cultures and to Elders past and present. We’re committed to inclusion and accessibility. If we can support you with any adjustments at any stage, please let us know.
Cyber Security Manager - Country Road Group
Country Road · Posted 7 days ago
About the role
At Country Road Group, our Group Functions sit at the heart of our business, driving the success of our portfolio of distinctive brands and enabling them to do what they do best. Working across the business, you will play a vital role in shaping how we operate, grow, and innovate, bringing our strategy to life. As the Cyber Security Manager, you will lead the cyber operational and engineering capability that protects Country Road Group’s systems and data. Reporting directly to the Head of IT: Enabling Platforms & Operations, you will lead our Cyber Security Analyst and Engineer, oversee security monitoring and incident response, and own the architecture and engineering roadmap for our core security controls and platforms. This is a hands-on, solutions-focused cyber leadership role. We are looking for someone with a strong technical foundation in cyber security who has built their career through security operations, engineering or architecture and is now ready to combine that technical expertise with people leadership, vendor management and broader business influence. You will be comfortable getting into the technical detail, taking ownership of security challenges and working within a complex and fast-paced environment to turn cyber risks into practical solutions. How You Will Contribute Lead, mentor and develop our cyber security team, overseeing the triage, investigation and response to security incidents and alerts Own the architecture and engineering roadmap for core security platforms, including MDR, XDR, SIEM, vulnerability management, email security and cloud security Develop and continuously improve incident response plans and playbooks, taking the lead during significant security incidents Drive improvements to detection and response capability in partnership with our outsourced MDR provider Design and implement scalable security controls and reference architectures across CRG’s evolving technology environment Take ownership of security vulnerabilities and technical risks, working with technology teams to develop and implement practical solutions Manage key security vendors and technology partners across performance, SLA’s, licensing, costs and ongoing service delivery Conduct IT security risk assessments and translate technical findings into clear, actionable recommendations for senior business leaders Partner with technology teams and senior stakeholders on security architecture, engineering decisions, technical trade-offs and cyber risk Partner with Risk & Governance teams on requirements such as PCI-DSS, ensuring compliance requirements translate into effective technical controls Maintain current knowledge of the cyber threat landscape and emerging technologies, continuously identifying opportunities to strengthen CRG’s security posture. Capabilities We Value 5 years’ experience in Cyber Security, with a strong technical background across security operations, engineering and/or architecture Demonstrated career experience working hands-on with cyber security technology, with subsequent progression into a lead, manager or senior technical role Strong knowledge of security architecture and engineering across areas such as network security, cloud security, endpoint/EDR and identity and access management Experience designing, implementing or maturing security tooling and controls such as MDR, XDR, SIEM and vulnerability management Strong incident response capability, including investigating security events, developing response playbooks and leading the resolution of significant incidents A solutions-focused mindset with the ability to move beyond identifying risk to designing and implementing practical solutions Demonstrated ability to lead, mentor and develop technical cyber security professionals Strong vendor management capability, including experience managing technology partners, service performance, SLA’s, licensing and commercial considerations Ability to translate complex technical risks into clear, business-relevant recommendations and influence senior stakeholders Working knowledge of frameworks such as ISO/IEC 27001/2, NIST, CIS and MITRE ATT&CK, with relevant cyber security or cloud certifications highly regarded Tertiary qualifications in Cyber Security, Computer Science, Information Technology, Engineering or a related discipline Retail experience and exposure to PCI-DSS would be advantageous, however we welcome experienced cyber security professionals from other complex technology environments. What We Offer Bi-annual product allowance, access to sample sales and 40% discount for you and your immediate family across all CRG brands Flex your leave your way, including birthday leave, volunteer leave, personal leave and more Access to health and wellbeing support, including Health Insurance, 24/7 EAP counselling, discounted gym memberships and financial advice services 18 weeks paid parental leave program for eligible employees with return-to-work clothing allowance Internal career opportunities across our brands Annual learning calendar to support your ongoing development Support impactful community and charity partnerships across our brands, including OCRF, Our Watch, First Nations Reconciliation, Movember, Red Cross and Landcare. Who We Are Country Road Group is a design-led portfolio of premium fashion brands, comprising five iconic labels: Country Road, Mimco, Trenery, Witchery and Politix. Each brand has its own story, and together they hold a market-leading position in the mid to upper tier of Australia's specialty fashion segment with a focus on delivering our ambition to build a portfolio of distinctive brands that drive sustainable growth. Country Road Group is part of Woolworths Holdings Limited (South Africa), a leading Southern Hemisphere retail group. We encourage you to explore our Current Opportunities and we look forward to connecting with you! Country Road Group acknowledges the Traditional Owners of Country throughout Australia and recognises their continuing connection to lands, waters and communities. We pay our respects to Aboriginal and Torres Strait Islander cultures and to Elders past and present. We’re committed to inclusion and accessibility. If we can support you with any adjustments at any stage, please let us know.
Japanese Speaking Associate Analyst, Falcon Complete (アソシエイトセキュリティアナリスト、リモート可)
CrowdStrike · Posted 12 days ago
About the role
As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. CrowdStrike は、世界で最も高度な攻撃者から組織を保護することにより、グローバル セキュリティに変化をもたらすことに専念する、意欲的で自発的なサイバー セキュリティ アナリストを探しています。当社の CrowdStrike 仮想セキュリティ オペレーション センターは、さまざまな経験を通じてスキル セットを拡張し、お客様のために発生したインシデントをリアルタイムで検出して対応する機会を提供します。 チームについて Falcon Complete Teamで成功する人はどんな人？ インシデントの検出、封じ込め、修復において、実践的な技術スキルを確かめることに興味がありますか? 意欲的ですか？スキルを急速に向上させる機会を探していますか? 顧客にとって意味のある、革新的な仕事をしたいですか？ インシデントレスポンスまたは情報セキュリティの経験を十分に活かせていないと感じていますか。 チームをリードし、顧客と関係を構築することに自信はありますか？ お互いに刺激し、切磋琢磨できる仲間と仕事がしたいですか？ グローバルチームの一員として、下記のシフトで働くことに意欲的ですか？ 割り当てられたシフトは（午前と午後のシフトもある)、水曜日から土曜日、または日曜日から水曜日のいずれかで、週 40 時間勤務です。標準的な週 5 日勤務と比較して、1日あたりの就業時間が若干長くなります。 業務内容 Windows、Mac、および Linux プラットフォーム全体でインシデント対応を行う 基本的なマルウェア解析を行う インシデントの検出と対策の実行のためのプロセスを開発および改善する 質の高い書面および口頭でのコミュニケーションを用い、推奨事項、調査結果を顧客管理層に提供する ブログ投稿、クラウドキャスト、およびその他のイベントでの発表等を通じて、業界のソートリーダーシップを示す 内部プログラムまたはチームを管理する 求めるスキル 実務経験 1 - 4年 監督なしで技術的なタスクを完了することができる 技術およびソフトスキルの両者のスキルアップに対する情熱 強いプロジェクト管理スキル インシデントレスポンス業界におけるリーダーとしての貢献 前向きな職場環境と態度を育む能力 技術レベルの異なる聴衆に対し、難解な技術的コンセプトを伝えることが出来るコミュニケーション能力。 インシデント対応: 組織のインシデント対応を実施または管理し、持続的標的型攻撃、組織犯罪、ハクティビストなどの標的型脅威を調査した経験 コンピュータ フォレンジック分析: インシデント対応調査でさまざまなフォレンジック分析ツールを使用して侵害の程度と範囲を特定する知識 システム管理: 対策と修復を行うために必要なシステム知識、ツールへの理解 ネットワーク フォレンジック分析: ネットワーク プロトコル、ネットワーク分析ツールに関する知識、および関連するネットワーク ログの分析力 マルウェア解析: 静的および動的なマルウェア分析を実行して、マルウェアの性質を理解する機能 インシデント管理: 標的型攻撃に関する深い理解と、侵害された組織に合わせた戦術的および戦略的修復計画を作成する能力 ネットワーク オペレーションおよびアーキテクチャ/エンジニアリング: 安全なネットワーク アーキテクチャに関する深い理解と、ネットワーク オペレーションの実行に関する豊富な経験 プログラミング/スクリプト: C、C#、VB、Python、Perl、Ruby on Rails、および .NET でのコーディング経験 現在日本在住（日本国内フルリモートは可能）又はオーストラリア在住（ビザスポンサーはありません）。 現地の顧客と直接コミュニケーションをとるために必要な高いビジネスレベルから母国語レベルの日本語スキル (ライティングを含む)。言語の校正サポートを必要とせずにドキュメントを作成できるレベル ビジネスレベルの英語力があれば良い、マストではありません。 オーストラリア在住の日本語が話せる方も大歓迎！ SOC MDR securityanalyst セキュリティアナリスト About the Role: CrowdStrike is looking for highly motivated, self-driven, Cyber Security analysts dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world. Our CrowdStrike virtual security operations center offers opportunities to expand your skill set through a wide variety of experiences, detecting and responding to incidents as they occur in real-time for our customers. About the Team What makes you a successful Falcon Complete Team Candidate? Do you find yourself interested in putting your hands-on technical skills to the test in detecting, containing, and remediating incidents? Are you self-motivated and looking for an opportunity to rapidly accelerate your skills? Do you crave new and innovative work that actually matters to your customer? Do you have an Incident Response or Information Security background that you’re not fully utilizing? Are you capable of leading teams and interacting well with customers? Do you love working around like-minded, smart people who you can learn from and mentor on a daily basis? Willing and able to work your allocated shift as part of our global, follow the sun team? The allocated shifts span either Wednesday to Saturday or Sunday to Wednesday for a 40-hour work week. These are slightly longer work days compared to a standard 5-day work week shift. What You'll Do: Exercise incident handling processes across Windows, Mac, and Linux platforms. Perform basic malware analysis. Develop and improve processes for incident detection and the execution of countermeasures Produce high-quality written and verbal communications, recommendations, and findings to customer management. Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events. Manage internal programs or teams. What You’ll Need: 1 - 4 years of related experience. Capable of completing technical tasks without supervision. Desire to grow and expand both technical and soft skills. Strong project management skills. Contributing thought leader within the incident response industry. Ability to foster a positive work environment and attitude. Strong verbal and communication skills of difficult technical concepts to audiences with varying levels of technical ability. Incident Handling: experience conducting or managing incident response for organizations, investigating targeted threats such as the Advanced Persistent Threat, Organized Crime, and Hacktivists. Computer Forensic Analysis: a background using a variety of forensic analysis tools in incident response investigations to determine the extent and scope of compromise. Systems Administration: an understanding of system internals is required to understand how to implement and execute countermeasures and remediation. Network Forensic Analysis: knowledge of network protocols, network analysis tools, and ability to perform analysis of associated network logs. Malware Analysis: ability to perform static and dynamic malware analysis to understand the nature of malware Incident Remediation: strong understanding of targeted attacks and able to create customized tactical and strategic remediation plans for compromised organizations. Network Operations and Architecture/Engineering: strong understanding of secure network architecture and strong background in performing network operations. Programming/Scripting: experience coding in C, C#, VB, Python, Perl, Ruby on Rails, and .NET. Currently located in Japan (remote within Japan will be gladly considered), unfortunately visa sponsorship is not available. High business level to native Japanese language skills (i.e. fluent including writing) required to communicate directly with local customers at a level that does not need peer proofreading. Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes. Australia based Japanese speakers welcome, visa sponsorship not available. LI-JC2 LI-Remote Benefits of Working at CrowdStrike: Market leader in compensation and equity awards Comprehensive physical and mental wellness programs Competitive vacation and holidays for recharge Paid parental and adoption leaves Professional development opportunities for all employees regardless of level or role Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections Vibrant office culture with world class amenities Great Place to Work Certified™ across the globe CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program. CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisionsincluding recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programson valid job requirements. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.
Japanese Speaking Associate Analyst, Falcon Complete ()
CrowdStrike · Posted 13 days ago
About the role
Australia - Remote, NW Australia - Remote, WA Australia - Remote, SA Australia - Melbourne Australia - Remote, QL Australia - Remote, AC Australia - Remote, VC Australia - Remote, NT Australia - Sydney Full time R30052 As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed - we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We're always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. CrowdStrike は、世界で最も高度な攻撃者から組織を保護することにより、グローバル セキュリティに変化をもたらすことに専念する、意欲的で自発的なサイバー セキュリティ アナリストを探しています。当社の CrowdStrike 仮想セキュリティ オペレーション センターは、さまざまな経験を通じてスキル セットを拡張し、お客様のために発生したインシデントをリアルタイムで検出して対応する機会を提供します。 チームについて Falcon Complete Teamで成功する人はどんな人？ インシデントの検出、封じ込め、修復において、実践的な技術スキルを確かめることに興味がありますか? 意欲的ですか？スキルを急速に向上させる機会を探していますか? 顧客にとって意味のある、革新的な仕事をしたいですか？ インシデントレスポンスまたは情報セキュリティの経験を十分に活かせていないと感じていますか。 チームをリードし、顧客と関係を構築することに自信はありますか？ お互いに刺激し、切磋琢磨できる仲間と仕事がしたいですか？ グローバルチームの一員として、下記のシフトで働くことに意欲的ですか？ 割り当てられたシフトは（午前と午後のシフトもある)、水曜日から土曜日、または日曜日から水曜日のいずれかで、週 40 時間勤務です。標準的な週 5 日勤務と比較して、1日あたりの就業時間が若干長くなります。 業務内容 Windows、Mac、および Linux プラットフォーム全体でインシデント対応を行う 基本的なマルウェア解析を行う インシデントの検出と対策の実行のためのプロセスを開発および改善する 質の高い書面および口頭でのコミュニケーションを用い、推奨事項、調査結果を顧客管理層に提供する ブログ投稿、クラウドキャスト、およびその他のイベントでの発表等を通じて、業界のソートリーダーシップを示す 内部プログラムまたはチームを管理する 求めるスキル 実務経験 1 - 4年 監督なしで技術的なタスクを完了することができる 技術およびソフトスキルの両者のスキルアップに対する情熱 強いプロジェクト管理スキル インシデントレスポンス業界におけるリーダーとしての貢献 前向きな職場環境と態度を育む能力 技術レベルの異なる聴衆に対し、難解な技術的コンセプトを伝えることが出来るコミュニケーション能力。 インシデント対応: 組織のインシデント対応を実施または管理し、持続的標的型攻撃、組織犯罪、ハクティビストなどの標的型脅威を調査した経験 コンピュータ フォレンジック分析: インシデント対応調査でさまざまなフォレンジック分析ツールを使用して侵害の程度と範囲を特定する知識 システム管理: 対策と修復を行うために必要なシステム知識、ツールへの理解 ネットワーク フォレンジック分析: ネットワーク プロトコル、ネットワーク分析ツールに関する知識、および関連するネットワーク ログの分析力 マルウェア解析: 静的および動的なマルウェア分析を実行して、マルウェアの性質を理解する機能 インシデント管理: 標的型攻撃に関する深い理解と、侵害された組織に合わせた戦術的および戦略的修復計画を作成する能力 ネットワーク オペレーションおよびアーキテクチャ/エンジニアリング: 安全なネットワーク アーキテクチャに関する深い理解と、ネットワーク オペレーションの実行に関する豊富な経験 プログラミング/スクリプト: C、C#、VB、Python、Perl、Ruby on Rails、および .NET でのコーディング経験 現在日本在住（日本国内フルリモートは可能）又はオーストラリア在住（ビザスポンサーはありません）。 現地の顧客と直接コミュニケーションをとるために必要な高いビジネスレベルから母国語レベルの日本語スキル (ライティングを含む)。言語の校正サポートを必要とせずにドキュメントを作成できるレベル ビジネスレベルの英語力があれば良い、マストではありません。 オーストラリア在住の日本語が話せる方も大歓迎！ SOC MDR securityanalyst セキュリティアナリスト About the Role: CrowdStrike is looking for highly motivated, self-driven, Cyber Security analysts dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world. Our CrowdStrike virtual security operations center offers opportunities to expand your skill set through a wide variety of experiences, detecting and responding to incidents as they occur in real-time for our customers. About the Team What makes you a successful Falcon Complete Team Candidate? Do you find yourself interested in putting your hands-on technical skills to the test in detecting, containing, and remediating incidents? Are you self-motivated and looking for an opportunity to rapidly accelerate your skills? Do you crave new and innovative work that actually matters to your customer? Do you have an Incident Response or Information Security background that you're not fully utilizing? Are you capable of leading teams and interacting well with customers? Do you love working around like-minded, smart people who you can learn from and mentor on a daily basis? Willing and able to work your allocated shift as part of our global, follow the sun team? The allocated shifts span either Wednesday to Saturday or Sunday to Wednesday for a 40-hour work week. These are slightly longer work days compared to a standard 5-day work week shift. What You'll Do: Exercise incident handling processes across Windows, Mac, and Linux platforms. Perform basic malware analysis. Develop and improve processes for incident detection and the execution of countermeasures Produce high-quality written and verbal communications, recommendations, and findings to customer management. Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events. Manage internal programs or teams. What You'll Need: 1 - 4 years of related experience. Capable of completing technical tasks without supervision. Desire to grow and expand both technical and soft skills. Strong project management skills. Contributing thought leader within the incident response industry. Ability to foster a positive work environment and attitude. Strong verbal and communication skills of difficult technical concepts to audiences with varying levels of technical ability. Incident Handling: experience conducting or managing incident response for organizations, investigating targeted threats such as the Advanced Persistent Threat, Organized Crime, and Hacktivists. Computer Forensic Analysis: a background using a variety of forensic analysis tools in incident response investigations to determine the extent and scope of compromise. Systems Administration: an understanding of system internals is required to understand how to implement and execute countermeasures and remediation. Network Forensic Analysis: knowledge of network protocols, network analysis tools, and ability to perform analysis of associated network logs. Malware Analysis: ability to perform static and dynamic malware analysis to understand the nature of malware Incident Remediation: strong understanding of targeted attacks and able to create customized tactical and strategic remediation plans for compromised organizations. Network Operations and Architecture/Engineering: strong understanding of secure network architecture and strong background in performing network operations. Programming/Scripting: experience coding in C, C#, VB, Python, Perl, Ruby on Rails, and .NET. Currently located in Japan (remote within Japan will be gladly considered), unfortunately visa sponsorship is not available. High business level to native Japanese language skills (i.e. fluent including writing) required to communicate directly with local customers at a level that does not need peer proofreading. Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes. Australia based Japanese speakers welcome, visa sponsorship not available. \LI-JC2 \LI-Remote Benefits of Working at CrowdStrike: Market leader in compensation and equity awards Comprehensive physical and mental wellness programs Competitive vacation and holidays for recharge Paid parental and adoption leaves Professional development opportunities for all employees regardless of level or role Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections Vibrant office culture with world class amenities Great Place to Work Certified across the globe CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program. CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisionsincluding recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programson valid job requirements. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance. CrowdStrike was founded in 2011 to fix a fundamental problem: The sophisticated attacks that were forcing the world's leading businesses into the headlines could not be solved with existing malware-based defenses. Founder George Kurtz realized that a brand new approach was needed - one that combines the most advanced endpoint protection with expert intelligence to pinpoint the adversaries perpetrating the attacks, not just the malware. There's much more to the story of how Falcon has redefined endpoint protection but there's only one thing to remember about CrowdStrike: We stop breaches.
Senior Cyber Security Analyst
Service Stream Energy & Water · Posted 19 days ago
About the role
Primary Location VIC - Melbourne - 655 Collins St Job Description Summary Service Stream is seeking an experienced Senior Cyber Security Analyst to join our growing Cyber Security team. This role is ideal for a security professional who enjoys a combination of hands-on technical work, stakeholder engagement, proactive threat hunting and risk mitigation, and continuous improvement. As a senior member of the team, you will provide technical leadership, mentor junior analysts, and contribute to the protection of Service Stream's IT and Operational Technology (OT) environments. You will play a key role in ensuring security is embedded into the design, implementation, and operation of business systems and services and will have a well-developed knowledge and experience in cyber security operations within the context of a large Defence Industry company. About the Role Location : Melbourne CBD (Collins Street) with a hybrid work arrangement of 3 days in the office and 2 days from home. Work type : full time permanent. Role requirements: Applicants must be Australian Citizens and eligible to obtain and maintain an Australian Government Security Clearance (Baseline or NV1, depending on operational requirements). What you’ll do Cyber Security Operations Investigate and respond to security alerts and incidents Manage Security Operations Centre (SOC) activities Support identity and access management Administer and optimise security technologies including SIEM, SOAR, email security, endpoint protection, and privileged access solutions Conduct threat hunting, threat intelligence analysis, and threat modelling activities Support phishing simulations, incident response and exercises, and security monitoring capabilities In All Roles Contribute to cyber security audits and compliance activities Participate in incident management, security exercises, and working groups Prepare technical reports, security procedures, and operational documentation Support continuous improvement initiatives across security controls, policies, and processes Share knowledge and mentor less experienced team members Assist with additional security responsibilities as required What You'll Bring Demonstrated experience in Cyber Security within Cyber Security Operations Experience working within Defence, Critical Infrastructure, or similarly regulated environments Strong understanding of cyber security frameworks and standards such as: ACSC Essential Eight, Information Security Manual (ISM), NIST Cyber Security Framework, ISO 27001, MITRE ATT&CK Frameworks Experience with cyber security service management, workflow management, and reporting tools Hands-on experience with security technologies such as: Splunk, CrowdStrike, Check Point, Zscaler, Service Now, Jira or similar platforms Qualifications Degree in Cyber Security, or a related discipline, or equivalent industry experience Industry certifications and security-focused training highly regarded Vendor certifications and product-specific training advantageous About Us Service Stream is an equal opportunity ASX-listed organisation that develops and operates Australia's essential service networks across telecommunications, utilities, transport, defence and social infrastructure. Our work supports and connects communities across the nation. Benefits of Working with Us Growth – Build your technical capability across cloud, infrastructure, security and modern workplace technologies. Discounts – Access to hundreds of retail and service discounts including Woolworths, JB Hi-Fi, Airbnb and Bupa. Paid Leave – Parental, cultural, community service, study, corporate volunteering and purchased leave options. Culture – Join a team that values accountability, collaboration, inclusion and continuous improvement. How to Apply Please submit your interest using the Apply button, where you will be directed to create a profile on our system. We celebrate diversity at Service Stream and welcome applications from Aboriginal and/or Torres Strait Islander peoples, people with disability or neurodivergence, and those from LGBTIQA, Veteran or other diverse groups. Applications will not be accepted via email. If you require reasonable adjustments to the recruitment process, please email [email protected] . Department GBIS How to Apply If this sounds like you apply now to the Service Stream Recruitment Team via the online application button.
Cyber Security Business Analyst
Otic Group Pty · Posted 19 days ago
About the role
“OTIC” means smart people doing smart work, together. We are a wholly owned Australian company based in Melbourne committed to helping our clients design and build intelligent software solutions that unlock value in their business. Otic Group was formed to provide talented technology professionals an opportunity to work with not only some of the most prominent companies in Australia , but work with incredibly talented peers in an exciting, dynamic young environment. We provide highly skilled expertise in Project Delivery, Data & Analytics, Cloud Strategy, Application Modernisation, and Cybersecurity. Currently, we’re looking for Business Analysts with Cyber Security Experience to come onboard as permanent employees and work with us to deliver great outcomes for our clients. The skills we’re looking for in this role are: Proven experience as a security business analyst, preferably in a senior role. Strong knowledge of information security principles, standards, and best practices. Familiarity with security frameworks and regulatory requirements (e.g. ISO 27001, NIST, GDPR). Experience as a Security Business Analyst and worked on Cyber security project experience for large complex environments ideally government (e.g. around SIEM, IAM, SOC, endpoint, multifactor authentication, etc.) Proficient in analysing complex systems and processes, identifying security gaps, and proposing effective solutions. Pro-active self-starter with the ability to lead all Business Analyst activities autonomously, with minimal direction in an often-ambiguous fast-paced matrix structured environment. Being a Melbourne based organisation, we’re looking for our team to be based locally. We also require applicants to hold an Australian Citizenship, Permanent Residency (PR), or have other permanent work rights.
Infrastructure and Security Manager
Collingwood Football Club · Posted 19 days ago
About the role
About the Collingwood Football Club Collingwood Football Club (CFC) was founded in 1892. Local residents, community and business leaders and politicians all hoped that having their own football club could help bring a measure of pride to a downtrodden suburb. In 2026, CFC is one of the great icons of Australian sport. Our history spans 130 years, 16 premierships and more finals appearances than any other club. Most importantly, Collingwood has grown from being a football club to a sports club with a commitment to our community. The opportunity The Infrastructure and Security Manager leads the Club’s core infrastructure platforms, network operations and cyber security controls, ensuring critical systems remain secure, available and resilient. Working closely with the Cyber Security Analyst and acting as the primary operational liaison with CyberCX and other specialist providers, this hands-on role drives continuous improvement in infrastructure performance and cyber maturity. Key responsibilities Infrastructure Operations Lead the day-to-day operability of network, infrastructure and security platforms, including monitoring, maintenance, troubleshooting and upgrades. Manage and optimise core infrastructure technologies including servers, virtualisation, storage, firewalls, switching, routing and wireless networks. Ensure infrastructure services maintain high levels of performance, availability and resilience. Manage and test backup, disaster recovery and business continuity capabilities in line with organisational requirements. Lead infrastructure upgrades, implementations and operational improvements. Maintain infrastructure documentation, standards and operating procedures. Cyber Security & Risk Management Plan, develop and implement cyber security measures in line with Club security frameworks, in partnership with the Cyber Security Analyst and external cyber security partners including CyberCX. Lead implementation and maintenance of security controls, firewalls, endpoint protection and intrusion detection technologies. Monitor network traffic and organisational systems for suspicious activity and emerging threats. Conduct security audits, vulnerability assessments and remediation activities. Coordinate the response to cyber security incidents using agreed incident response frameworks. Support the delivery of cyber awareness training and security improvement programs. Remain informed of emerging cyber threats, industry trends and best practice standards. Cyber Security Partner Management Act as the primary relationship manager for CyberCX and other specialist cyber security providers. Coordinate external cyber security services, assessments and remediation programs. Partner with CyberCX to identify emerging threats, vulnerabilities and cyber risks relevant to the Club. Coordinate cyber incident response activities with CyberCX, ensuring timely escalation, investigation and resolution of security events. Leverage CyberCX expertise to strengthen the Club’s cyber maturity, governance and security capability. Ensure recommendations arising from CyberCX engagements are appropriately prioritised, communicated and implemented. Technology Collaboration & Service Reliability Work collaboratively with the Cyber Security Analyst to ensure excellent end-user technology outcomes and service reliability. Work collaboratively with the Cyber Security Analyst to align operational support, infrastructure and cyber security priorities. Provide technical expertise and guidance to support technology projects, upgrades and service improvements. Establish coordinated responses for major outages, infrastructure failures and cyber security events. Support technology availability, resilience and business continuity objectives across the Club. Leadership & Vendor Management Lead and oversee the Cyber Security Analyst role, ensuring delivery of agreed outcomes and performance expectations. Maintain relationships with infrastructure, security and technology vendors. Ensure third-party providers deliver services in accordance with agreed standards and requirements. Support procurement, planning and evaluation of infrastructure and cyber security solutions. Skills / Experience To be successful as the Infrastructure and Security Manager , you will be someone who can: Lead the Club’s infrastructure, network and cyber security environment, keeping critical systems secure, available and resilient. Establish clear ownership and accountability for security controls, incident response and disaster recovery. Build a culture of proactive risk management and continuous improvement. Collaborate with the Cyber Security Analyst, CyberCX and technology vendors to turn expert advice into action. Support the Club’s cyber maturity and technology resilience. Football Clubs are fast-paced environments but you will engrain yourself into the Collingwood culture, remain agile, adaptable, and consistently champion our Company values of DO BETTER, SIDE BY SIDE, A NEST FOR ALL and FLY HIGHER. What we offer As a valued staff member of our Sporting Club you will be a part of a fun, inclusive and flexible work environment: Access to state of art High Performance Gym Facility Access to Professional Development and Learning Development Courses Access to tickets to all AFL and AFLW matches Access to exclusive partner offers, the likes of Nike, Emirates, AIA Vitality, La Trobe, CUB Economy, Business Class with Emirates, TaylorMade and KGM Opportunities to support with Collingwood community outreach and volunteer programs (Magpie Nest Cafe) Behind the scenes access to Match-Day, including the ability to support in on-ground activations 10 Gifted Leave days every year (on top of your Annual Leave) To Apply If you are interested in this position, please send through your CV and cover letter that addresses why you are interested in working with the Collingwood Football Club, how your skills/experience would qualify for the position, and how you would contribute to the culture of the organisation. Please send this application to [email protected] . Applications close COB Friday 23 October 2026 (however, we may close this earlier if we receive a large volume of applications). Please keep reading… Research shows that while men apply to jobs when they meet an average of 60% of the criteria, women and other marginalized folks tend to only apply when they check every box. So if you think you have what it takes, but don’t necessarily meet every single point above, please still get in touch. We’d love to have a chat and see if you could be a great fit. We believe in being a Nest For All – we champion respect, diversity and inclusion to make our Club a safe and welcoming place for all. The Collingwood Football Club is an equal opportunity employer and encourages applications from suitably qualified and diverse candidates. We provide a welcoming, safe and flexible approach to work and provide an environment that benefits from and enables the best from everyone. As an organization we are committed to protecting children and young people from harm. It is essential that anyone involved with the Collingwood Football Club understands their responsibility in relation to child safety. Our organization requires all applicants to obtain a ‘Working with Children Check’ prior to appointment. To learn more about working at Collingwood Football Club and our values, please visit https://www.collingwoodfc.com.au/news/76/careers
Infrastructure and Security Manager
Collingwood Football Club · Posted 19 days ago
About the role
About the Collingwood Football Club Collingwood Football Club (CFC) was founded in 1892. Local residents, community and business leaders and politicians all hoped that having their own football club could help bring a measure of pride to a downtrodden suburb. In 2026, CFC is one of the great icons of Australian sport. Our history spans 130 years, 16 premierships and more finals appearances than any other club. Most importantly, Collingwood has grown from being a football club to a sports club with a commitment to our community. The opportunity The Infrastructure and Security Manager leads the Club’s core infrastructure platforms, network operations and cyber security controls, ensuring critical systems remain secure, available and resilient. Working closely with the Cyber Security Analyst and acting as the primary operational liaison with CyberCX and other specialist providers, this hands-on role drives continuous improvement in infrastructure performance and cyber maturity. Key responsibilities Infrastructure Operations Lead the day-to-day operability of network, infrastructure and security platforms, including monitoring, maintenance, troubleshooting and upgrades. Manage and optimise core infrastructure technologies including servers, virtualisation, storage, firewalls, switching, routing and wireless networks. Ensure infrastructure services maintain high levels of performance, availability and resilience. Manage and test backup, disaster recovery and business continuity capabilities in line with organisational requirements. Lead infrastructure upgrades, implementations and operational improvements. Maintain infrastructure documentation, standards and operating procedures. Cyber Security & Risk Management Plan, develop and implement cyber security measures in line with Club security frameworks, in partnership with the Cyber Security Analyst and external cyber security partners including CyberCX. Lead implementation and maintenance of security controls, firewalls, endpoint protection and intrusion detection technologies. Monitor network traffic and organisational systems for suspicious activity and emerging threats. Conduct security audits, vulnerability assessments and remediation activities. Coordinate the response to cyber security incidents using agreed incident response frameworks. Support the delivery of cyber awareness training and security improvement programs. Remain informed of emerging cyber threats, industry trends and best practice standards. Cyber Security Partner Management Act as the primary relationship manager for CyberCX and other specialist cyber security providers. Coordinate external cyber security services, assessments and remediation programs. Partner with CyberCX to identify emerging threats, vulnerabilities and cyber risks relevant to the Club. Coordinate cyber incident response activities with CyberCX, ensuring timely escalation, investigation and resolution of security events. Leverage CyberCX expertise to strengthen the Club’s cyber maturity, governance and security capability. Ensure recommendations arising from CyberCX engagements are appropriately prioritised, communicated and implemented. Technology Collaboration & Service Reliability Work collaboratively with the Cyber Security Analyst to ensure excellent end-user technology outcomes and service reliability. Work collaboratively with the Cyber Security Analyst to align operational support, infrastructure and cyber security priorities. Provide technical expertise and guidance to support technology projects, upgrades and service improvements. Establish coordinated responses for major outages, infrastructure failures and cyber security events. Support technology availability, resilience and business continuity objectives across the Club. Leadership & Vendor Management Lead and oversee the Cyber Security Analyst role, ensuring delivery of agreed outcomes and performance expectations. Maintain relationships with infrastructure, security and technology vendors. Ensure third-party providers deliver services in accordance with agreed standards and requirements. Support procurement, planning and evaluation of infrastructure and cyber security solutions. Skills / Experience To be successful as the Infrastructure and Security Manager , you will be someone who can: Lead the Club’s infrastructure, network and cyber security environment, keeping critical systems secure, available and resilient. Establish clear ownership and accountability for security controls, incident response and disaster recovery. Build a culture of proactive risk management and continuous improvement. Collaborate with the Cyber Security Analyst, CyberCX and technology vendors to turn expert advice into action. Support the Club’s cyber maturity and technology resilience. Football Clubs are fast-paced environments but you will engrain yourself into the Collingwood culture, remain agile, adaptable, and consistently champion our Company values of DO BETTER, SIDE BY SIDE, A NEST FOR ALL and FLY HIGHER. What we offer As a valued staff member of our Sporting Club you will be a part of a fun, inclusive and flexible work environment: Access to state of art High Performance Gym Facility Access to Professional Development and Learning Development Courses Access to tickets to all AFL and AFLW matches Access to exclusive partner offers, the likes of Nike, Emirates, AIA Vitality, La Trobe, CUB Economy, Business Class with Emirates, TaylorMade and KGM Opportunities to support with Collingwood community outreach and volunteer programs (Magpie Nest Cafe) Behind the scenes access to Match-Day, including the ability to support in on-ground activations 10 Gifted Leave days every year (on top of your Annual Leave) To Apply If you are interested in this position, please send through your CV and cover letter that addresses why you are interested in working with the Collingwood Football Club, how your skills/experience would qualify for the position, and how you would contribute to the culture of the organisation. Please send this application to [email protected] . Applications close COB Friday 23 October 2026 (however, we may close this earlier if we receive a large volume of applications). Please keep reading… Research shows that while men apply to jobs when they meet an average of 60% of the criteria, women and other marginalized folks tend to only apply when they check every box. So if you think you have what it takes, but don’t necessarily meet every single point above, please still get in touch. We’d love to have a chat and see if you could be a great fit. We believe in being a Nest For All – we champion respect, diversity and inclusion to make our Club a safe and welcoming place for all. The Collingwood Football Club is an equal opportunity employer and encourages applications from suitably qualified and diverse candidates. We provide a welcoming, safe and flexible approach to work and provide an environment that benefits from and enables the best from everyone. As an organization we are committed to protecting children and young people from harm. It is essential that anyone involved with the Collingwood Football Club understands their responsibility in relation to child safety. Our organization requires all applicants to obtain a ‘Working with Children Check’ prior to appointment. To learn more about working at Collingwood Football Club and our values, please visit https://www.collingwoodfc.com.au/news/76/careers
Expression of Interest - Cyber & Information Technology Professionals
Trinzic · Posted 19 days ago
About the role
Title: Expression of Interest - Cyber & Information Technology Professionals At KBR - We do things that matter. We deliver science, technology and engineering solutions to governments and companies around the world. KBR employs approximately 38,000 people worldwide with customers in more than 80 countries and operations in over 29 countries. KBR is proud to work with its customers across the globe to provide technology, value-added services, and long-term operations and maintenance services to ensure consistent delivery with predictable results. At KBR, We Deliver. Think.KBR.com KBR in Australia With over 65 years working on some of Australia's largest and most complex projects, KBR has unmatched experience supporting the nation's critical infrastructure, energy transition and national security priorities. KBR has around 2,000 employees throughout Australia, who are focused on delivering innovative technology and engineering solutions for a safer, more secure and sustainable future. Learn more about KBR in Australia Belong, Connect and Grow at KBR At KBR, we are passionate about our people and our Zero Harm culture. These inform all that we do and are at the heart of our commitment to, and ongoing journey toward being a People First company. That commitment is central to our team of team's philosophy and fosters an environment where everyone can Belong, Connect and Grow. We Deliver - Together. The Opportunity: Are you a Cyber Security or Information Technology professional looking to play a key role in supporting Australia's defence capability? We're seeking Expressions of Interest from experienced Cyber Security Specialists, Security Analysts, Security Engineers, Network Engineers, Systems Administrators, ICT Support Professionals, Infrastructure Engineers, Solution Architects, Software Developers, DevOps Engineers, Systems Engineers, and IT Project Professionals to support critical defence and national security programs across Australia. Join innovative teams delivering secure, resilient, and mission-critical technology solutions that enable the future of defence. We're interested in professionals with: Experience in Cyber Security, Information Technology, Systems Administration, Networking, Software Development, or Cloud Technologies Knowledge of cyber security frameworks, risk management, governance, compliance, and secure systems design Experience with enterprise infrastructure, cloud platforms, networks, applications, or operational technology environments Strong problem-solving, stakeholder engagement, and collaboration skills Defence or defence industry experience Whether your expertise is in cyber defence, ICT infrastructure, cloud engineering, systems integration, software development, or technology project delivery, we'd love to hear from you. Register your Expression of Interest today and help protect and enable the next generation of Australia's defence capability. All candidates will be required to hold and maintain an active Baseline Defence Security Clearance at a minimum. Only candidates holding a Baseline Clearance or above should apply. What we will offer you: · A workplace culture certified as a Great Place To Work · Flexible working · Competitive salary (including annual reviews) · Paid parental leave · Income protection · Corporate rewards · Salary packaging/Novated leasing · Employee stock purchase plans · Flu shots, skin checks and discounted private health insurance · Career development: Online learning, mentorship and career pathways If you're ready to shape tomorrow, let's get started. Apply Now! KBR acknowledges the Traditional Custodians of Country throughout Australia and their continuing connections to land, sea, community and culture. We pay our respects to Elders past and present. As a Major Service Provider of the Australian Defence Force, an AGSVA security clearance will be required and compliance to International Traffic in Arms Regulations (ITAR). As such, our hiring decisions are based on the key requirements of each role and candidates are selected based on their unique strengths and experiences. LI-AH1
Cyber Security Analyst
Teamified · Posted 29 days ago
About the role
Description About the client Our client is a collective of companies, including a licensed telecommunications carrier providing network and data centre services across Australia and Internationally, and a Managed Service Provider (MSP) and Manage Security Service Provider (MSSP) specialising in IT solutions for mid-market corporate clients and government entities. Our vision is to empower all organisations, regardless of size, with access to fit-for-purpose, secure IT and telecommunications solutions that support the achievement of their own strategic objectives. Job Summary: The Cyber Security Analyst is tasked with continuously monitoring and triaging security events and alerts from SIEM and other security tools across diverse client environments. This role requires promptly investigating and responding to security incidents, providing initial analysis and implementing containment actions to ensure rapid resolution. Furthermore, the analyst will maintain and tune existing platforms while contributing to the development of robust detection and response playbooks and will collaborate with both clients and internal teams to deliver expert security analysis and actionable recommendations. The analyst will also iterate on historical processes such as the introduction of new tooling including, but not limited to AI, for use within the security operations centre. Responsibilities: Respond to and triage alerts quickly to reduce Mean Time to Respond (MTTR). Monitor customer environments proactively to improve detection speed and client confidence. Tune and build alerting rules to minimize false positives and enhance accuracy. Create clear documentation and playbooks to accelerate response workflows. Engage with customers and manage escalations to improve satisfaction and trust. Automate repetitive alert handling to increase efficiency and reduce manual effort. Implement AI/ML solutions to lower Mean Time to Detect (MTTD) and MTTR. Continuously refine detection and automation models to achieve reliable outcomes. Requirements Essential Strong analytical and problem-solving skills Excellent communication skills, with the ability to convey technical concepts to both technical and non-technical stakeholders Knowledge of threat actor behaviour, tradecraft and the attack lifecycle A broad understanding of principles in networking, infrastructure, and operating systems Highly organised, proactive, and able to prioritise and multi-task under pressure. Desirable Proficiency in designing and implementing automation, analytical models, and working with generative AI or large language models Applied scripting knowledge in a language such as python, bash, PowerShell etc. Work Health & Safety Responsibiities All employees are required to: • Obtain a police check prior to employment • Be eligible for a minimum baseline security clearance • Abide by all company policies and procedures • Report any injuries, hazards or incidents to yourself or others • Maintain a safe workplace for yourself and colleagues Information Security Our client operates under an ISO 27001 compliant Information Security Management System. As such, you will be responsible for adhering to all applicable policies processes and procedures. You are also responsible for reporting any potential security incidents or security improvements to the Information Security Officer. Additional Information: Direct Reports • Nil Key Relationships • SOC Team, GRC Team, MIT Team(s) If you possess the required skills and are eager to contribute to our team's success, we encourage you to apply for this exciting opportunity. Apply now!
EL1 Cyber Security Analyst
Softtest pays pty · Posted 29 days ago
About the role
Job Description: Australian Citizens residing in Australia only respond. Must have Negative Vetting Level 1. Mandatory Criteria Extensive demonstrated experience with risk and information security frameworks, policies, and standards, including the Federal Government Protective Security Policy Framework (PSPF) and Information Security Manual (ISM), and international standards (ISO 27001/2). Demonstrated working experience in security threat and risk assessment and development of security authorisation artefacts. Weighted Criteria Demonstrated security experience within complex ICT environments. Strong stakeholder management skills, and the ability to communicate security concepts to non-technical audiences both verbally and in writing. Understanding of global Cyber Security trends, attack vectors and techniques. Demonstrated experience in Federal Government. Relevant tertiary or other qualifications Required Skills: Working Experience Information Security Stakeholder Management Risk Assessment Government Writing Security Management
APS6 Cyber Security Risk Analyst
Softtest pays pty · Posted 29 days ago
About the role
Job Description: Australian Citizens residing in Australia only respond.Preferred NV1 Clearance or be willing and eligible to obtain. Essential criteria 1. Minimum of 5 years experience in Cyber Governance, Risk and Compliance, or a related field of cyber security 2. Must be an Australian citizen and hold a minimum NV1 Security Clearance 3. Demonstrated experience in the production of system-specific security documentation artefacts aligned to the Information Security Manual Suite of documentation 4. Demonstrated experience conducting security risk analysis of ICT systems and assessing the cyber threat, inherent vulnerabilities and the likelihood and consequences of adverse cyber threat activity. Desirable criteria 1. CISM, CISSP or other cyber security qualifications 2. A degree in computer science or a related field. Required Skills: Analysis Risk Analysis Information Security Security Computer Science Documentation Science
Security Engineer, AWS Security
Amazon · Posted 29 days ago
About the role
Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance, with the ability to successfully complete an Organisational Suitability Assessment. For more information regarding security clearances please visit (https://www.agsva.gov.au/) Amazon Web Services (AWS) is the leading cloud service provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises to large government customers, run their operations and applications on AWS’ highly secure infrastructure. AWS Security is looking for a Security Systems Engineer to play a pivotal role in ensuring the security and integrity of our systems and infrastructure. You will work closely with our security team to implement and maintain robust security measures that adhere to Australian Government security requirements, including the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM). Key job responsibilities Key responsibilities may include: Hold or be able to attain an Australian Government Security Vetting Agency clearance (see https://www1.defence.gov.au/security/clearances) • Performing security event monitoring, incident management and response. • Develop, tune, and maintain SIEM detections, dashboards, and correlation rules • Conduct proactive threat hunting and analysis to identify suspicious behaviour • Investigate, respond and be the escalation point for security alerts and incidents • Support the integration and optimisation of security data sources within SIEM platforms • Contribute to continuous improvement of SOC processes and automation initiatives including authoring SOC SOP’s and runbooks. • Apply frameworks such as MITRE ATT&CK and NIST in concert with the ISM and PSPF to guide security operations. • Perform on-call duties as required, out of business hours. A day in the life A typical day for a Security Engineer may involve Responding to new detections: Monitor security alerts in real-time, investigate suspicious activities by analysing logs and network traffic, determine if incidents are legitimate threats or false positives, and coordinate immediate response actions including containment and remediation when threats are confirmed. Write security detections: Develop and implement custom detection rules based on emerging threat intelligence, tune existing security signatures to reduce false positives while maintaining coverage, and create automated alerts for specific attack patterns or indicators of compromise relevant to the organization's environment. Threat hunt: Proactively search through network logs, endpoint data, and system activities for signs of advanced persistent threats that may have evaded automated detection systems, using threat intelligence feeds and behavioural analysis to identify potential security breaches before they cause significant damage. Work with service teams on security issues: Collaborate with IT, network, and application teams to remediate identified vulnerabilities, coordinate security patches and system hardening efforts, provide security guidance during incident response, and ensure proper implementation of security controls across all infrastructure components. Generate metrics and dashboards: Create and maintain security performance indicators including incident response times, threat detection rates, and system availability metrics, develop executive-level reports summarizing security posture and trends, and build real-time dashboards for continuous monitoring of security operations effectiveness. About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. The team is comprised of security professionals with a cross section of national security and private sector experience, providing a range of perspectives required for creative problem solving. We value diversity of thought, creativity, and a strong Bias for Action and Earn Trust. We believe that there are no "perfect" security solutions and we develop and iterate using a continuous improvement process. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. - 3 years experience as a SOC Analyst or Defensive Cyber Role. - Experience with SIEM tools (e.g., Splunk, Microsoft Sentinel, Sumo Logic, or similar). - Good understanding of incident response, threat detection, and security monitoring. - Good working knowledge of foundational systems and protocols e.g HTTP, DNS, TCP/IP. - Excellent analytical, problem-solving, and communication skills. - 5 years experience as a SOC Analyst or Defensive Cyber Role. - Demonstrated experience and application of incident response, threat detection, and security monitoring high security environments. - Strong technical working knowledge of key security domains, e.g Cryptography, Identity & Access Management and Application Security. - Experience with AWS products and services Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
Security Engineer, AWS Security
Amazon · Posted 29 days ago
About the role
Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance, with the ability to successfully complete an Organisational Suitability Assessment. For more information regarding security clearances please visit (https://www.agsva.gov.au/) Amazon Web Services (AWS) is the leading cloud service provider, providing virtualised infrastructure, storage, networking, messaging, and many other services to customers all over the world. AWS runs a globally distributed environment, operating at massive levels of scale. Businesses, from start-ups to enterprises to large government customers, run their operations and applications on AWS’ highly secure infrastructure. AWS Security is looking for a Security Systems Engineer to play a pivotal role in ensuring the security and integrity of our systems and infrastructure. You will work closely with our security team to implement and maintain robust security measures that adhere to Australian Government security requirements, including the Protective Security Policy Framework (PSPF) and the Information Security Manual (ISM). Key job responsibilities Key responsibilities may include: Hold or be able to attain an Australian Government Security Vetting Agency clearance (see https://www1.defence.gov.au/security/clearances) • Performing security event monitoring, incident management and response. • Develop, tune, and maintain SIEM detections, dashboards, and correlation rules • Conduct proactive threat hunting and analysis to identify suspicious behaviour • Investigate, respond and be the escalation point for security alerts and incidents • Support the integration and optimisation of security data sources within SIEM platforms • Contribute to continuous improvement of SOC processes and automation initiatives including authoring SOC SOP’s and runbooks. • Apply frameworks such as MITRE ATT&CK and NIST in concert with the ISM and PSPF to guide security operations. • Perform on-call duties as required, out of business hours. A day in the life A typical day for a Security Engineer may involve Responding to new detections: Monitor security alerts in real-time, investigate suspicious activities by analysing logs and network traffic, determine if incidents are legitimate threats or false positives, and coordinate immediate response actions including containment and remediation when threats are confirmed. Write security detections: Develop and implement custom detection rules based on emerging threat intelligence, tune existing security signatures to reduce false positives while maintaining coverage, and create automated alerts for specific attack patterns or indicators of compromise relevant to the organization's environment. Threat hunt: Proactively search through network logs, endpoint data, and system activities for signs of advanced persistent threats that may have evaded automated detection systems, using threat intelligence feeds and behavioural analysis to identify potential security breaches before they cause significant damage. Work with service teams on security issues: Collaborate with IT, network, and application teams to remediate identified vulnerabilities, coordinate security patches and system hardening efforts, provide security guidance during incident response, and ensure proper implementation of security controls across all infrastructure components. Generate metrics and dashboards: Create and maintain security performance indicators including incident response times, threat detection rates, and system availability metrics, develop executive-level reports summarizing security posture and trends, and build real-time dashboards for continuous monitoring of security operations effectiveness. About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. The team is comprised of security professionals with a cross section of national security and private sector experience, providing a range of perspectives required for creative problem solving. We value diversity of thought, creativity, and a strong Bias for Action and Earn Trust. We believe that there are no "perfect" security solutions and we develop and iterate using a continuous improvement process. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. - 3 years experience as a SOC Analyst or Defensive Cyber Role. - Experience with SIEM tools (e.g., Splunk, Microsoft Sentinel, Sumo Logic, or similar). - Demonstrated experience and application of incident response, threat detection, and security monitoring high security environments. - Good working knowledge of foundational systems and protocols e.g HTTP, DNS, TCP/IP. - Strong technical working knowledge of key security domains, e.g Cryptography, Identity & Access Management and Application Security. Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.