Cyber Security Analyst

Blackbook Recruitment; City of Melbourne; On-site; AUD 120,000 - 150,000; Full time

Job summary

Blackbook Recruitment in Melbourne is seeking a hands-on Cyber Security Engineer to join a growing security function. You will work across Microsoft 365, Azure, IT and OT, contributing to security controls, vulnerability management and incident response while mentoring a Systems Administrator.

This permanent, full-time role offers broad exposure to cloud and on-premise security projects, with opportunities to shape security practices and participate in major technology transformations.

Qualifications

• 3+ years of experience in cyber security or a security-focused role.
• Strong understanding of cyber security principles, frameworks and practices.
• Hands-on experience across Microsoft Azure and Microsoft 365.
• Experience with security technologies such as EDR, firewalls, IAM, SASE, DLP or similar.
• Experience with vulnerability management, security scanning and remediation.
• Understanding of Zero Trust, PAM, NDR, UEBA and network security concepts.
• Experience with cloud and enterprise infrastructure environments.
• Familiarity with DevSecOps, automation and orchestration.
• Strong analytical and problem-solving skills.
• Strong communication and stakeholder engagement skills.
• Ability to identify, assess and communicate cyber security risks.

Responsibilities

• Implement, integrate and support cyber security controls across IT, OT and IoT environments.
• Support security across Microsoft 365, Azure, enterprise infrastructure and data centre environments.
• Deploy, manage and maintain security technologies including firewalls, SASE, EDR, IAM and encryption.
• Support vulnerability management, security assessments and remediation activities.
• Contribute to Zero Trust, PAM, DLP, NDR, UEBA and other security initiatives.
• Embed security practices into development and deployment processes.
• Use automation and orchestration to improve security and compliance.
• Support incident response activities and act as an Incident Handler when required.
• Contribute to disaster recovery, business continuity and security resilience.
• Use threat intelligence to identify and respond to emerging security risks.
• Support major technology security projects, including centralisation of security and monitoring systems.
• Contribute to physical access and broader security initiatives as required.
• Provide technical guidance and mentoring to other members of the technology team.
• Continuously improve security practices, controls and processes across the organisation.

Skills

Cyber security

Azure

Microsoft 365

EDR

Firewalls

SASE

IAM

PAM

DLP

NDR

UEBA

Zero Trust

DevSecOps

Automation

Tools

EDR

Firewalls

SASE

IAM

PAM

DLP

NDR

UEBA

Job description

A hands-on Cyber Security Engineer opportunity working across cloud, Microsoft environments, infrastructure and operational technology, with the opportunity to help shape a growing security function.

The Opportunity

An exciting opportunity has become available for a Cyber Security Engineer to join an established technology team in a newly created position.

This is a broad, hands-on security role covering Microsoft 365, Azure, enterprise infrastructure and data centre environments, with exposure to both IT and operational technology.

You’ll also have the opportunity to help shape and improve the organisation’s cyber security practices, while working closely with the wider infrastructure team. As part of the role, you’ll also have a Systems Administrator working alongside you approximately 50% of the time, allowing you to mentor and develop another member of the team while continuing to build your own technical capability.

The Role

You’ll be involved across security engineering, vulnerability management, security controls, incident response and continuous improvement. The role will give you exposure across cloud and infrastructure security, as well as projects involving broader physical and technology security environments. This is a great opportunity for someone who wants more than a traditional security monitoring role and enjoys being hands-on with the technology.

Key Responsibilities

• Implement, integrate and support cyber security controls across IT, OT and IoT environments.
• Support security across Microsoft 365, Azure, enterprise infrastructure and data centre environments.
• Deploy, manage and maintain security technologies including firewalls, SASE, EDR, IAM and encryption.
• Support vulnerability management, security assessments and remediation activities.
• Contribute to Zero Trust, PAM, DLP, NDR, UEBA and other security initiatives.
• Embed security practices into development and deployment processes.
• Use automation and orchestration to improve security and compliance.
• Support incident response activities and act as an Incident Handler when required.
• Contribute to disaster recovery, business continuity and security resilience.
• Use threat intelligence to identify and respond to emerging security risks.
• Support major technology security projects, including the centralisation of security and monitoring systems.
• Contribute to physical access and broader security initiatives where required.Provide technical guidance and mentoring to other members of the technology team.
• Continuously improve security practices, controls and processes across the organisation.

About You

We’re looking for a hands-on Cyber Security Engineer who has a broad understanding of modern security environments and enjoys working across both technology and infrastructure.

• 3+ years’ experience in cyber security or a similar security-focused role.
• Strong understanding of cyber security principles, frameworks and practices.
• Hands-on experience across Microsoft Azure and Microsoft 365.
• Experience with security technologies such as EDR, firewalls, IAM, SASE, DLP or similar.
• Experience with vulnerability management, security scanning and remediation.
• Understanding of Zero Trust, PAM, NDR, UEBA and network security concepts.
• Experience working with cloud and enterprise infrastructure environments.
• Familiarity with DevSecOps, automation and orchestration.
• Strong analytical and problem-solving skills.
• Strong communication and stakeholder engagement skills.
• Ability to identify, assess and communicate cyber security risks.
• Relevant tertiary qualification in Cyber Security, IT, Engineering or a related discipline, or equivalent practical experience.

The following experience would be highly regarded:

• Exposure to OT or industrial environments.
• Experience with AESCSF, ISA/IEC 62443, ASD Essential Eight or NIST.
• Experience across data centre security or physical security technologies.
• Experience with IoT security.
• Security-related industry certifications.
• Experience mentoring or developing junior technology professionals.

What’s on Offer

• Permanent, full-time opportunity.
• Newly created role with the opportunity to help shape the security function.
• Broad exposure across Azure, Microsoft 365, infrastructure and data centre environments.
• Hands-on involvement across both cyber and physical security projects.
• Opportunity to work across IT, OT and IoT environments.
• Mentoring opportunity, with a Systems Administrator working alongside you 50% of the time.
• Exposure to major security and technology transformation projects.
• A varied security engineering role rather than a purely monitoring-focused position.