Cyber Security Specialist

uniquehire; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

uniquehire in Australia is seeking an experienced design and integration architect to lead security product platforms such as RunZero across corporate, data centre, cloud and OT environments. You will shape discovery, scanning and asset management, building scalable integration patterns and automation to reduce noise and improve data quality for downstream systems.

The role collaborates with SRE and operations to establish standards, governance and reliable runbooks for platform changes and

Qualifications

• 5+ years of experience in design and implementation of RunZero or comparable security product platforms.
• Configure discovery coverage for corporate, data centre, cloud, remote access, network, IoT and OT environments.
• Design active scanning, passive discovery and integration patterns for different network zones and operational risk profiles.
• Establish safe scanning standards, approval gates, maintenance windows and exception processes for sensitive environments.
• Configure asset classification, ownership, business context, criticality and lifecycle attributes.
• Define standards for handling transient, temporary, duplicate, decommissioned and unmanaged assets.
• Develop reusable configuration patterns and templates across sites and environments.
• Maintain a clear separation between production configuration, testing and experimental changes.

Responsibilities

• Integrate new product with CMDB, ServiceNow, Tenable, EDR, NAC, DNS/DHCP, cloud platforms, identity systems, SIEM, SOAR and relevant infrastructure tools.
• Implement API based ingestion and egress patterns using secure service identities and least privilege access.
• Automate asset reconciliation, deduplication, enrichment, ownership mapping and data quality checks.
• Ensure downstream systems receive consistent, useful and appropriately scoped data rather than uncontrolled asset or alert noise.
• Define integration contracts, schemas, field mappings, ownership, error handling, retry behaviour and support expectations.
• Build mechanisms to detect integration drift, stale credentials, failed synchronisation and unexpected data volume changes.

Skills

RunZero experience

Security product design

Platform operating model

Asset tagging standards

Tools

CMDB

ServiceNow

Tenable

EDR

NAC

DNS/DHCP

SIEM

SOAR

Cloud platforms

Identity systems

Job description

5+ years of experience in design and implement of RunZero or any other comparable security product and platform operating model, including environments, access, roles, boundaries, sites, asset groups, tags and naming standards.

Configure discovery coverage for corporate, data centre, cloud, remote access, network, IoT and relevant OT environments.

Design appropriate active scanning, passive discovery and integration patterns for different network zones and operational risk profiles.

Establish safe scanning standards, approval gates, maintenance windows and exception processes for sensitive or fragile environments.

Configure asset classification, ownership, business context, criticality and lifecycle attributes.

Define standards for handling transient, temporary, duplicate, decommissioned and unmanaged assets.

Develop reusable configuration patterns and templates that can be applied consistently across sites and environments.

Maintain a clear separation between production configuration, testing and experimental changes.

Integrations and data engineering

Integrate new product with CMDB, ServiceNow, Tenable, EDR, NAC, DNS/DHCP, cloud platforms, identity systems, SIEM, SOAR and relevant infrastructure tools.

Implement API based ingestion and egress patterns using secure service identities and least privilege access.

Automate asset reconciliation, deduplication, enrichment, ownership mapping and data quality checks.

Ensure downstream systems receive consistent, useful and appropriately scoped data rather than uncontrolled asset or alert noise.

Define integration contracts, schemas, field mappings, ownership, error handling, retry behaviour and support expectations.

Build mechanisms to detect integration drift, stale credentials, failed synchronisation and unexpected data volume changes.

Automation and workflow engineering

Automate platform onboarding, configuration validation, scan scheduling, asset tagging, reporting and operational housekeeping.

Automate the routing of actionable exposures to the correct security, infrastructure, network, cloud or application owners.

Implement event driven workflows for newly discovered assets, exposed services, control gaps, unauthorised devices and material changes.

Design idempotent automation that can be safely re run without creating duplicate records, tickets or configuration drift.

Use APIs, webhooks, scripts and workflow platforms to reduce manual administration and improve response times.

Introduce approval controls for high impact or potentially disruptive actions.

Create automated lifecycle handling for assets that are retired, renamed, moved, rebuilt or short lived.

SRE and operations

Treat new product configuration and operational processes as code wherever possible.

Establish version control, peer review, automated testing, release controls and rollback procedures for platform changes.

Define service level indicators and objectives for discovery coverage, data freshness, integration health, scan success, alert delivery and remediation workflow reliability.

Implement dashboards and alerts that detect platform degradation before it affects consumers.

Create operational runbooks for common failures, including collector or explorer issues, scan failures, integration errors, data quality problems and access failures.

Design backup, recovery, disaster recovery and business continuity procedures appropriate to the service.