Cyber Security Engineer

Ambition Group Limited; North Sydney Council; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid working

Job summary

Ambition Group Limited is seeking a hands-on Cyber Security Engineer to own the security of a Microsoft-centric environment in North Sydney. You’ll implement and continuously improve controls, run SecOps rotations, and collaborate with the CISO on security initiatives.

With 5–10 years in security and strong experience with Entra ID, Defender for Email and Purview, Azure, and Microsoft 365, you’ll drive AI governance, identity improvements and threat detection across the business.

Qualifications

• Proven 5–10 years in cyber security engineering across security and IT.
• Confident communicator able to present to stakeholders.
• Hands-on with Microsoft security tools and cloud platforms.

Responsibilities

• Implement and improve security controls across a Microsoft‑based environment.
• Run day-to-day security operations with monthly SecOps rotation.
• Support security due diligence and integration for acquisitions, (~1–2 site visits per month).
• Drive projects like AI governance and identity/access improvements.
• Roll out an email security gateway and strengthen defences against AI-driven threats.
• Remediate vulnerabilities from scans, pen tests and audits.
• Engage stakeholders on-site and promote security awareness.

Skills

Stakeholder engagement

Communication skills

Learning mindset

Education

Microsoft security certifications (SC-300, SC-200, SC-100)

Tools

Microsoft Entra ID

Defender for Email

Microsoft Purview

Azure

Microsoft 365

Job description

Cyber Security Engineer

• Hybrid working: 3 days in the office, 2 days from home
• North Sydney
• Permanent position: Start ASAP

Spent your career keeping other people's environments secure, and ready to own the security of one? This is a hands‑on cyber role where you'll shape how a Microsoft-centric environment is built, hardened and improved, working directly with the CISO.

Our client is a fast-growing national organisation. The business moves quickly, takes a dynamic approach to security, and there is plenty of interesting work to get stuck into. You'll be building and integrating security platforms, tuning settings, and improving them over time, rather than just keeping the lights on.

Responsibilities include:

• Implement and continuously improve security controls across a Microsoft-based environment, including identity, email and data protection
• Run day‑to‑day security operations, with a monthly rotation on SecOps: monitoring, investigating events and responding to incidents
• Support security due diligence and integration of newly acquired businesses, including 1-2 site visits per month
• Drive projects such as AI governance, identity and access improvements, and automated detection and response
• Strengthen defences against emerging threats, including AI‑driven attacks, and help roll out an email security gateway
• Support remediation of vulnerabilities from scans, penetration tests and audits
• Engage stakeholders at every level, from introducing yourself on-site and running Q&As to promoting security awareness

Experience needed:

• Proven experience in a cyber security engineering role, whether in-house or within an MSP, ideally 5-10 years across security and IT.
• Strong hands‑on experience with Microsoft Entra ID, Defender for Email and Microsoft Purview
• Background in system administration, working with Azure and Microsoft 365
• Microsoft security certifications are highly regarded (SC-300, SC-200, SC-100 or similar)
• Confident communicator who is comfortable presenting to and engaging with stakeholders
• A keen learner with a positive, can‑do attitude