Cyber Security Engineer

Capricorn; City of Melbourne; On-site; AUD 140,000 - 200,000; Full time

Benefits offered by this job

Hybrid work model

Training and development

Paid parental leave

Social events

Gym membership near office

Private health benefits

Work from home kit

Job summary

Capricorn is seeking a Cyber Security Engineer to protect our digital environment across Microsoft 365 and Azure. You will design controls, lead investigations, and implement scalable remediation aligned with Essential Eight and ISO 27001:2022.

You’ll work with tech and business stakeholders to balance risk and innovation, in a collaborative, security‑minded culture at Capricorn.

Qualifications

• 7+ years’ experience in cyber security engineering or security operations.
• Ability to manage complex cyber security issues end-to-end.
• Experience aligning controls with risk, ISO 27001:2022 and Essential Eight.

Responsibilities

• Lead end-to-end security engineering across M365 and Azure.
• Design and operationalise security controls and automations.
• Lead complex investigations, incidents, and remediation efforts.
• Collaborate with stakeholders to balance risk, usability and innovation.

Skills

Microsoft 365

Azure security

Defender/Defender for Cloud

Sentinel

Vulnerability management

SecOps & incident response

Security automation

Education

Microsoft security certifications (e.g. Security / Identity / Azure Security Engineer)

Bachelor's degree in Cyber Security / IT / CS or related

Senior security certifications (GIAC / CISSP / CISM / CRISC)

Tools

Azure Logic Apps

Microsoft Power Platform

PAM / IAM concepts

Job description

A little about us

Capricorn is one of Australia and New Zealand’s largest and most dynamic Member-owned organisations. Since 1974, we’ve provided our Members with financial and business solutions to make running a business easier. Our flagship Trade Account offers instant credit with over 1600 Preferred Suppliers, simplified monthly expenses, and a generous rewards program.

We have a strong foundation in the automotive and machinery aftermarkets. Our vibrant community includes over 31,000 Members across Australia and New Zealand, from national franchises to your local family workshop. Last year, Capricorn facilitated nearly $4bn in sales with our Preferred Suppliers.

At Capricorn, we're about more than just products and services. We work hard to ensure that our Members, Suppliers and People feel like they're part of something bigger - a Community which is connected and supported to make a difference, while having some fun along the way!

Role Purpose

The Cyber Security Engineer plays a critical role in protecting the organisation’s digital environment by delivering end to end security engineering outcomes across Microsoft 365 and Azure platforms. Operating with a high degree of autonomy, this role leads complex cyber investigations, handles escalation level incidents, and implements sustainable, long term remediation solutions.

You will design and operationalise security controls and automations that strengthen detection, response, and assurance capabilities, while ensuring the organisation’s cyber posture remains aligned to the Essential Eight maturity model and ISO 27001:2022 standards. This role values thoughtful decision making, continuous improvement, and security solutions that are practical, resilient, and built to scale.

You will work closely with technology and business stakeholders to balance risk, usability, and innovation—contributing to a strong, supportive, and forward looking cyber security culture.

Technical Skills (Required)

• Advanced hands‑on experience across Microsoft 365 and Azure security services, including Defender, Intune, Purview, and Defender for Cloud, Sentinel applied in real‑world monitoring, investigation, and incident response.
• Strong capability in securing cloud and enterprise environments through identity and access controls, network security, logging, monitoring, and secure configuration.
• Demonstrated expertise in vulnerability management, security operations (SecOps), incident response, and root cause analysis within complex environments.
• Practical knowledge of cyber security frameworks, risk management, and security automation, with the ability to operationalise controls end to end.

Preferred / Highly Regarded Skills

• Experience with Privileged Access Management (PAM) and Identity and Access Management (IAM), including governance, access reviews, and privileged access controls.
• Exposure to security automation and workflow platforms such as Azure Logic Apps and Microsoft Power Platform to improve detection, response, and reporting.
• Experience implementing and tuning application control and execution policies to reduce attack surface and strengthen control effectiveness.

Experience

• 7+ years’ experience in cyber security engineering and/or security operations roles, demonstrating end to end ownership and accountability for technical outcomes.
• Proven ability to manage complex cyber security issues independently, from initial investigation through to implementation and steady state operation.
• Strong judgement and problem solving skills, with experience operating in complex and evolving environments while managing competing priorities and expectations.
• Demonstrated capability to adopt and embed new technologies and approaches in a structured, risk appropriate manner.
• Experience designing security solutions that are sustainable, well documented, and aligned with broader organisational objectives.

We recognise that expertise can be gained in different ways. If you meet most, but not all, of the above criteria, we encourage you to apply.

Qualifications

Required

• Industry recognised cyber security certifications demonstrating strong technical foundations and ongoing professional development, such as Microsoft security certifications (e.g. Microsoft Certified: Security, Identity, or Azure Security Engineer).

Preferred

• Tertiary qualification in Cyber Security, Information Technology, Computer Science, or a related discipline, or equivalent practical experience.
• Senior level certifications such as GIAC, CISSP, CISM, CRISC, or similar.
• Additional certifications aligned to security operations, cloud security, or incident response.

A little on life at Capricorn

Joining our community is about more than just a job, so here’s what’s in it for you:

• Work flexibility – We’re all unique, and so are the ways in which we work. We have Hybrid (2 days working from home) written into our policy.
• Development Opportunities – your success is ours too. We provide training opportunities and development to give you the tools you need to grow.
• Paid parental leave – during life’s most important times, we support parents’ leave (for both parents) and their transition back to work.
• Get social – our social calendar is full, with a range of different virtual and face-to-face events to keep us connected.
• A place you want to be – from the sweeping city views, coffee on tap and the general buzz of our team, Capricorn is a place you want to be.
• A cherry on top – we’ve got a heap of benefits that our team actually use, including a fantastic reward and recognition program, wellness program, additional leave purchase and so much more!
• Amazing Benefits – Unlock amazing benefits at Capricorn. We offer all staff free gym membership near the office, discounted private health benefits and all inclusive working from home kits to get you started!