Cyber Security Engineer

Ambition; Sydney; Hybrid; AUD 140,000 - 180,000; Full time

Job summary

Ambition in Sydney is seeking a hands-on cyber security engineer to own the security of a Microsoft-centric environment. The role blends on-site collaboration with remote work, reporting directly to the CISO and helping shape platform security.

You will implement and improve security controls across Microsoft Entra ID, Defender for Email and Purview, and run day-to-day SecOps with continuous stakeholder engagement.

Qualifications

• Proven experience in a cyber security engineering role, either in-house or MSP.
• Hands-on experience with Microsoft Entra ID, Defender for Email and Microsoft Purview.

Responsibilities

• Implement and continuously improve security controls across a Microsoft-based environment, including identity, email and data protection
• Run day‑to‑day security operations, with a monthly rotation on SecOps: monitoring, investigating events and responding to incidents
• Support security due diligence and integration of newly acquired businesses, including 1-2 site visits per month
• Drive projects such as AI governance, identity and access improvements, and automated detection and response
• Strengthen defences against emerging threats, including AI‑driven attacks, and help roll out an email security gateway
• Support remediation of vulnerabilities from scans, penetration tests and audits
• Engage stakeholders at every level, from introducing yourself on‑site and running Q&As to promoting security awareness

Skills

Cyber security engineering

Stakeholder communication

Problem solving

Learning mindset

Tools

Microsoft Entra ID

Defender for Email

Microsoft Purview

Azure

Microsoft 365

Job description

Hybrid working: 3 days in the office, 2 days from home

North Sydney

Spent your career keeping other people's environments secure, and ready to own the security of one? This is a hands‑on cyber role where you'll shape how a Microsoft-centric environment is built, hardened and improved, working directly with the CISO.

Our client is a fast-growing national organisation. The business moves quickly, takes a dynamic approach to security, and there is plenty of interesting work to get stuck into. You'll be building and integrating security platforms, tuning settings, and improving them over time, rather than just keeping the lights on.

Responsibilities include:

• Implement and continuously improve security controls across a Microsoft-based environment, including identity, email and data protection
• Run day‑to‑day security operations, with a monthly rotation on SecOps: monitoring, investigating events and responding to incidents
• Support security due diligence and integration of newly acquired businesses, including 1-2 site visits per month
• Drive projects such as AI governance, identity and access improvements, and automated detection and response
• Strengthen defences against emerging threats, including AI‑driven attacks, and help roll out an email security gateway
• Support remediation of vulnerabilities from scans, penetration tests and audits
• Engage stakeholders at every level, from introducing yourself on‑site and running Q&As to promoting security awareness

Experience needed:

• Proven experience in a cyber security engineering role, whether in‑house or within an MSP, ideally 5-10 years across security and IT.
• Strong hands‑on experience with Microsoft Entra ID, Defender for Email and Microsoft Purview
• Background in system administration, working with Azure and Microsoft 365
• Microsoft security certifications are highly regarded (SC-300, SC-200, SC-100 or similar)
• Confident communicator who is comfortable presenting to and engaging with stakeholders
• A keen learner with a positive, can‑do attitude