EL1 Cyber Operations Security Expert

Peoplebank; City of Melbourne; Hybrid; AUD 150,000 - 190,000; Full time

Job summary

Peoplebank is seeking a senior cyber security professional in Melbourne to lead monitoring and response efforts in a complex enterprise environment. You will report to the Director of Cyber Security Operations and help shape cloud, network, and endpoint security across multiple platforms.

The role focuses on incident handling, threat hunting, and crisis management, with responsibilities for phishing simulations, threat intel, and security governance.

Qualifications

• 7+ years IT or cybersecurity experience with at least 3 years in a management or senior architectural role.
• Direct experience leading high severity cyber investigations, threat hunting, and crisis management.
• Deep, multi-domain knowledge across cloud environments (AWS, Azure), ZTNA, and DevSecOps.
• Proven track record aligning security programs with NIST, ISO 27001, or ASD Essential Eight.

Responsibilities

• Lead proactive monitoring, investigation, and mitigation of security incidents.
• Conduct threat hunting and security event analysis.
• Manage complex cyber incidents and forensic investigations.
• Support incident response activities and crisis management.
• Develop phishing simulations and cyber awareness initiatives.
• Research emerging threats and vulnerabilities.
• Perform SIEM log analysis, reporting, and visualization within Splunk.
• Identify and onboard critical data sources into security monitoring platforms.
• Collaborate with Security Operations and IT teams to strengthen security controls.
• Mentor junior team members and drive continuous improvement initiatives.
• Produce incident response reports, threat intelligence briefings, and operational reporting.

Skills

Leadership

Threat hunting

Incident response

Cloud security

ZTNA

DevSecOps

NIST/ISO27001

ASD Essential Eight

Splunk

Tools

Splunk

AWS

Azure

DevSecOps tools

Job description

• 18 month contract + potential extensions
• Offices in Richmond or Geelong (3 days in office, 2 days wfh

• Federal Government Agency
• 18 month contract + potential extensions
• Offices in Richmond or Geelong (3 days in office, 2 days wfh

This is an exciting opportunity for a senior cyber security professional to play a critical role in protecting enterprise systems, users, and data while contributing to the delivery of essential services through a complex and evolving technology environment.

Reporting to the Director of Cyber Security Operations, you will be responsible for identifying, investigating, and responding to cyber threats while providing subject matter expertise across cloud, network, and endpoint security domains.

Key Responsibilities

• Lead proactive monitoring, investigation, and mitigation of security incidents
• Conduct threat hunting and security event analysis
• Manage complex cyber incidents and forensic investigations
• Support incident response activities and crisis management
• Develop phishing simulations and cyber awareness initiatives
• Research emerging threats and vulnerabilities
• Perform SIEM log analysis, reporting, and visualisation within Splunk
• Identify and onboard critical data sources into security monitoring platforms
• Collaborate with Security Operations and IT teams to strengthen security controls
• Mentor junior team members and drive continuous improvement initiatives
• Produce incident response reports, threat intelligence briefings, and operational reporting

Required Experience

• Australian citizenship
• Minimum 7 years in IT or cybersecurity, with at least 3 years operating at a management or senior architectural level.
• Direct experience leading high severity cyber investigations, threat hunting, and crisis management.
• Deep, multi-domain technology experience encompassing cloud environments (AWS, Azure), Zero Trust Network Architecture (ZTNA), and DevSecOps.
• Proven track record of aligning security programs with global frameworks such as NIST, ISO 27001, or the Australian ASD Essential Eight.

Desirable Skills

• Demonstrated familiarity with log aggregation and Security Incident and Event Management (SIEM) systems
• Knowledge of the Information Security Manual (ISM) and cyber security concepts.
• Demonstrated experience implementing and using Incident Response Frameworks (NIST SP 800-61 Incident Handling Guide, Mitre Frameworks)
• Formal tertiary qualifications or industry certifications in a cyber security related field (e.g. Azure/AWS, Splunk Certified)

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.