Associate Security Engineer

Reece Group; City of Melbourne; On-site; AUD 70,000 - 90,000; Full time

Job summary

Reece Group is seeking an Associate Security Engineer to join our Cyber Defence team in Melbourne. You will work across day-to-day security operations and practical engineering delivery, monitoring alerts and helping with incident response to keep our platforms safe.

You’ll build automation, improve tooling and contribute to cloud security, AI posture management and secure software delivery. A curious, hands-on learner with a willingness to grow will thrive in this role.

Qualifications

• Familiarity with cyber security concepts and tools like SIEM, SOAR, EDR.
• Exposure to cloud security, vulnerability management and secure software delivery.
• Curiosity and willingness to learn, with a hands-on problem-solving mindset.

Responsibilities

• Monitor, triage and respond to security alerts across endpoints, identity, email, cloud and network.
• Support investigations, containment and recovery during security incidents.
• Help improve detection rules, dashboards, runbooks and response playbooks.

Skills

Cyber security concepts

SIEM

SOAR

EDR (endpoint detection & response)

Cloud platforms

Scripting

Vulnerability management

Job description

About the role

Are you curious about cyber security, motivated by solving problems and keen to grow your technical capability in a hands-on role? We're looking for an Associate Security Engineer to join our Cyber Defence team and help keep Reece, our customers and our teams safe.

As an Associate Security Engineer, you'll work across day-to-day security operations and practical engineering delivery. You'll help monitor and triage security alerts, support incident response, reduce vulnerabilities, improve security tooling and build automation that makes our work faster, smarter and more effective.

This is a great opportunity for someone with early experience in information security, IT operations, cloud or software engineering - or someone who has built relevant skills through study, certifications, labs or personal projects. You'll be supported by senior analysts, engineers and the Technical Lead Cyber Defence as you build depth and confidence over time.

What you'll be doing

Monitoring, triaging and responding to security alerts across endpoint, identity, email, cloud and network sources.

Supporting investigations, containment and recovery activities during security incidents.

Helping improve detection rules, dashboards, reports, runbooks and response playbooks.

Respond to user-reported phishing and email security requests, and support end users with security questions.

Tracking vulnerability and exposure findings, working with teams to support remediation through to closure.

Building automation to reduce repetitive work, including enrichment, reporting, ticket handling and response actions.

Using AI and agentic AI to improve triage, documentation and day-to-day security processes.

Supporting cloud, application and AI posture management across AWS, Azure and Reece's digital platforms and working with teams to resolve and prevent misconfigurations.

Support secure software delivery by helping to uplift pipeline and code security scanning.

Contributing to team rituals, continuous improvement and knowledge sharing.

About you

You're curious, hands-on and keen to learn. You enjoy investigating how things work, asking good questions and finding practical ways to solve problems. You're comfortable following process, documenting what you find and escalating early when you need support.

You'll bring exposure to cyber security concepts and tools such as SIEM, SOAR, endpoint detection and response, email security, vulnerability management, scripting or cloud platforms. You don't need to know everything on day one - what matters is your curiosity, drive to grow and willingness to get involved.

You'll be part of a team helping protect the platforms, applications and services that support Reece's continued growth and digital future. You'll have the chance to build capability across security operations, cloud security, automation and emerging AI security practices.