Hybrid Cyber Security Engineer — Cloud, SIEM & Defenses

Commonwealth Superannuation Corporation; Canberra; Hybrid; AUD 110,000 - 140,000; Full time

Benefits offered by this job

Flexible and hybrid work options

Enhanced parental leave

Job summary

Commonwealth Superannuation Corporation (CSC) seeks a Cyber Security Engineer to operate, maintain and uplift CSC's cyber security services. The role focuses on administration of security toolsets, collaborating with Technology teams, and stakeholder engagement from Canberra.

The engineer will contribute to cloud security, Defender, SIEM, and risk assessments. The role emphasizes day-to-day maintenance, design and improvement of security controls, and alignment with essential security standards.

Qualifications

• Tertiary qualifications in Cyber Security, Computer Science or a related discipline.
• Relevant industry security certifications (CEH, CISM, CISSP, GSEC etc.).
• Hands on experience implementing, configuring, and managing Microsoft Defender (for endpoint, email, Cloud, identities and Cloud apps) and Intune
• Hands on experience implementing, configuring, and managing SIEM, preferably Splunk or Sentinal, as well as firewalls and web proxy
• Security compliance in financial and government environments e.g. APRA 231/234 and ISM.
• Demonstrated knowledge of multiple security frameworks (e.g. NIST, PSPF) and of security best practices for cloud services (IaaS, PaaS & SaaS) particularly AWS and Azure security configuration.
• Demonstrated knowledge of industry good practices such as OWASP, PCI DSS, ISO27001/2, ASD E8, NIST CSF.
• Experience in the enterprise design of contemporary technologies such as Identity and Access Management, End Point Protection, DDoS Protection, Data Loss Prevention.
• Complex threat and risk assessments and security incident investig.
• Demonstrated ability to provide expert security advice, develop quality cyber security controls, processes and policies.
• Demonstrated ability to build and maintain collaborative relationships.
• Highly developed written and oral communication and presentation skills
• Highly developed liaison and negotiation skills.

Responsibilities

• Design, implement, and manage cyber security infrastructure, toolsets & rulesets including areas of Cloud security (Azure and AWS), Microsoft Defender & Intune , firewalls, SIEM, Application Control, PAM, email security, etc.
• Support, maintain and provide advice on uplift and enhancement activities, including ACSC’s Essential Eight.
• Review existing security configurations and provide recommendations on improvements.
• Produce security documentation, plans, and procedures on tooling and processes.
• Assess the relevance of new and emerging Cyber Security Suppliers and Technologies.
• Contribute to the Security team meeting its overall responsibilities including where required.
• Assist with cyber security incident response by completing Investigations and remediations.
• Assist with Security Threat & Risk Assessments and relevant tasks.

Skills

Cyber security

Azure

AWS

Microsoft Defender

Intune

SIEM

Firewalls

PAM

APRA 231/234

ISM

NIST

PSPF

OWASP

PCI DSS

ISO27001/2

ASD E8

NIST CSF

Identity and Access Management

End Point Protection

DDoS Protection

Data Loss Prevention

Threat & Risk Assessments

Incident Investigations

Education

Tertiary qualifications in Cyber Security, Computer Science or related discipline

Security certifications (CEH, CISM, CISSP, GSEC)

Tools

Splunk

Sentinel

Job description

Commonwealth Superannuation Corporation (CSC) seeks a Cyber Security Engineer to operate, maintain and uplift CSC's cyber security services. The role focuses on administration of security toolsets, collaborating with Technology teams, and stakeholder engagement from Canberra.

The engineer will contribute to cloud security, Defender, SIEM, and risk assessments. The role emphasizes day-to-day maintenance, design and improvement of security controls, and alignment with essential security standards.