Cyber Security Engineer

Avant Mutual Group; Sydney; Hybrid; AUD 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working environment

Job summary

Avant Mutual Group in Sydney is seeking a Security Engineer to join our Security Engineering team and help shape the security controls that protect our people, systems and data. This role spans on-premises, cloud and SaaS environments, with a focus on automation and DevOps-style practices to improve security delivery and resilience.

You will work with security, technology and business stakeholders, embedding security into projects from the outset and providing IDAM support as needed.

Qualifications

• 3–5 years' experience in Security Engineering, Cyber Security, Infrastructure Security or related discipline.
• Hands-on experience across security domains including network security, EDR, SIEM, cloud security, email security or vulnerability management.
• Strong understanding of networking, operating systems, identity management and cloud security concepts.
• Experience implementing and supporting security controls across hybrid environments.
• Exposure to scripting, APIs, automation or DevOps practices.
• Experience supporting SIEM onboarding, security monitoring and detection engineering activities.
• Excellent communication skills with the ability to engage technical and non-technical stakeholders.
• A continuous learning mindset and passion for emerging security technologies.

Responsibilities

• Design, build, configure and deploy security controls across hybrid environments.
• Engineer and integrate security technologies that support secure business and technology change.
• Manage and optimise security platforms across endpoint, email, network, cloud and security monitoring domains.
• Develop automation, workflows and integrations that improve operational efficiency and reduce manual effort.
• Support SIEM onboarding, log management, detection engineering and alert tuning activities.
• Assist technology teams with vulnerability remediation and secure configuration initiatives.
• Review and govern network security policies, firewall rules, segmentation controls and secure connectivity requirements.
• Partner with Security Architecture, BISO, infrastructure and application teams to implement security controls and risk treatments.
• Contribute to continuous improvement initiatives, platform lifecycle management and capability uplift across the security function.

Skills

Security engineering

Cyber security

Networking

Cloud security

Scripting

Automation

DevOps practices

Communication skills

Continuous learning

Stakeholder engagement

Tools

CrowdStrike

Netskope

BeyondTrust

Abnormal AI

SIEM

IDAM

PAM

Azure

AWS

Job description

We are looking for a Security Engineer to join Avant's Security Engineering team and help shape the security capabilities that protect our people, systems and data. This is an opportunity to work across a diverse technology landscape spanning on-premises, cloud and SaaS environments, designing and delivering security controls that enable secure business and technology change.

Working closely with security, technology and business stakeholders, you'll play a key role in engineering, integrating and automating security solutions that reduce risk, improve resilience and strengthen Avant's cyber security posture. Combining technical expertise with a practical, solutions-focused approach, you'll help embed security into technology delivery while driving continuous improvement across our security platforms and capabilities.

We value strong security engineering fundamentals, a deep understanding of security control objectives, and a willingness to learn and apply new technologies. Experience with specific vendor platforms is helpful, but your ability to understand the underlying security outcomes and adapt to new tools is what will set you apart.

The role has four key priorities:

• Engineering, integrating and continuously improving security controls and capabilities across cloud, SaaS and on-premises environments.
• Leveraging automation, integrations and DevOps-style practices to improve the efficiency, consistency and effectiveness of security engineering activities.
• Partnering with technology, application and business teams to support secure project delivery and embed security into solutions from the outset.
• Providing secondary support for Identity and Access Management (IDAM) engineering, helping maintain team resilience and operational continuity.

Key accountabilities:

• Design, build, configure and deploy security controls across hybrid environments.
• Engineer and integrate security technologies that support secure business and technology change.
• Manage and optimise security platforms across endpoint, email, network, cloud and security monitoring domains.
• Develop automation, workflows and integrations that improve operational efficiency and reduce manual effort.
• Support SIEM onboarding, log management, detection engineering and alert tuning activities.
• Assist technology teams with vulnerability remediation and secure configuration initiatives.
• Review and govern network security policies, firewall rules, segmentation controls and secure connectivity requirements.
• Partner with Security Architecture, BISO, infrastructure and application teams to implement security controls and risk treatments.
• Contribute to continuous improvement initiatives, platform lifecycle management and capability uplift across the security function.

Skills and experience required:

• 3-5 years' experience in Security Engineering, Cyber Security, Infrastructure Security or a related discipline.
• Hands-on experience across multiple security domains including network security, EDR, SIEM, cloud security, email security or vulnerability management.
• Strong understanding of networking, operating systems, identity management and cloud security concepts.
• Experience implementing and supporting security controls across hybrid environments.
• Exposure to scripting, APIs, automation or DevOps practices.
• Experience supporting SIEM onboarding, security monitoring and detection engineering activities.
• Excellent communication skills with the ability to engage technical and non-technical stakeholders.
• A continuous learning mindset and passion for emerging security technologies.

Highly Regarded

• Hands on experience with technologies such as CrowdStrike, Netskope, BeyondTrust, Abnormal AI, SIEM, IDAM or PAM platforms is beneficial not mandatory.
• Cloud security experience across Azure and/or AWS.
• PowerShell, Python, automation or infrastructure-as-code experience.
• Experience in regulated industries such as financial services, healthcare or insurance.
• Knowledge of APRA CPS 234, ISO 27001, NIST or CIS Controls.
• Industry certifications such as CISSP, CISM, CCSP, AZ-500, Security+, CEH or OSCP.

Purpose-driven organisation supporting Australia's healthcare community.
Opportunity to work across a modern and diverse security technology landscape.
Exposure to cloud, automation and security transformation initiatives.
Collaborative and high-performing cyber security team.
Hybrid working environment with a strong commitment to professional development and continuous learning.

For further information, please contact Sue Allen, Talent Acquisition Business Partner on 0429 404 ***.