Information Security/Cybersecurity Operations Specialist

HESTA Super; City of Melbourne; On-site; AUD 110,000 - 140,000; Full time

Benefits offered by this job

Extended leave

Professional development

Health & wellbeing

Financial benefits

Job summary

HESTA is seeking an Information Security/Cybersecurity Operations Specialist to join its growing security team in Melbourne. You will monitor security alerts, investigate incidents and lead response activities with a focus on DLP, insider risk and AI-related threats.

You will work across internal teams and with MSSP/MDR partners to strengthen cyber resilience and support APRA CPS 234 and CPS 230 obligations while continuously tuning SIEM/SOAR content and threat detection capabilities.

Qualifications

• Hands-on experience across DLP, monitoring, incident response and threat detection.
• Experience with SIEM/SOAR, threat hunting, and detection engineering.
• Experience securing or monitoring generative and agentic AI, including data leakage and prompt injection.
• Familiarity with MSSP/MDR arrangements and cloud/identity security.

Responsibilities

• Monitor, triage and investigate security alerts and incidents.
• Develop and tune DLP and insider risk controls.
• Detect and respond to AI-related threats, including shadow AI and data leakage.
• Collaborate with MSSP/MDR partners to strengthen cyber resilience.
• Support compliance with CPS 234 and CPS 230.

Skills

DLP

Security Monitoring

Incident Response

Threat Detection

SIEM/SOAR

Threat Hunting

AI Security

MSSP/MDR

Cloud Security

Identity & Access

Regulatory Knowledge

Certifications

Education

Cybersecurity qualification

IT/CS qualifications

Industry certifications

Tools

SIEM/SOAR platforms

Threat Intelligence Tools

Job description

Information Security/Cybersecurity Operations Specialist

Bring your authentic and passionate self to this exceptional role #careerswithimpact

Join HESTA's growing Information Security/Cybersecurity team and play a hands-on role in strengthening our cyber resilience. Reporting to the Manager, Information Security Operations, you'll lead day-to-day security monitoring, threat detection, investigation and response, with a particular focus on Data Loss Prevention (DLP), insider risk and emerging AI threats. You'll work across HESTA, with our MSSP/MDR and security partners to identify and respond to evolving threats - including data leakage to generative AI, prompt injection, shadow AI, agentic AI and adversarial use of AI.

What You'll Do

• Monitor, triage and investigate security alerts and incidents, supporting containment, eradication and recovery.
• Operate and continuously improve DLP and insider risk controls, including investigation, tuning and exception management.
• Detect and respond to AI-related security threats, including shadow AI and data leakage.
• Conduct threat hunting and intelligence activities aligned to MITRE ATT&CK and emerging threats.
• Support digital forensics and incident response activities.
• Develop and tune SIEM/SOAR detection content and optimise SOC security platforms.
• Partner with internal teams, MSSP/MDR providers and external security partners to strengthen cyber resilience.
• Support HESTA's information security obligations, including APRA CPS 234 and CPS 230.

What You'll Bring

You’ll be an experienced Cybersecurity/Security Operations professional with:

• Hands-on experience across DLP, security monitoring, incident response and threat detection.
• Strong understanding of SIEM/SOAR, threat hunting and detection engineering.
• Experience securing or monitoring generative and agentic AI, including data leakage, prompt injection and non-human identities - highly regarded.
• Experience working with MSSP/MDR or outsourced security partners.
• Knowledge of cloud, identity and access security and contemporary cyber security frameworks.
• Understanding of the Australian regulatory environment, particularly CPS 234, CPS 230 and privacy requirements.
• Relevant cybersecurity, IT or Computer Science qualifications and industry certifications are highly regarded.

This is an opportunity to work at the intersection of cybersecurity, data protection and emerging AI risk in a purpose-led organisation. If you’re curious, hands-on and passionate about staying ahead of an evolving threat landscape, we’d love to hear from you

Benefits that matter and make a difference for our employees

• Leave for those moments that matter, an additional 6 days of leave at the end of year, up to 6 days paid volunteer leave, gender neutral paid parental leave of 20 weeks, Gender Affiliation leave, reproductive health and wellbeing leave, Cultural and Ceremonial leave. Access your LSL after 3 years, take AL at half pay, and purchase up to 2 weeks additional leave (just to name a few).
• Your professional development matters, up to $5,000 per year professional development and up to 8 days professional development leave, HESTA scholarships and free access to a range of premium learning tools.
• Your health and wellbeing matters, free annual flu shots and skin checks, incredible social events throughout the year and a comprehensive employee assistance program available 24/7.
• Your financial wellbeing matters, up to 15% super, financial planning support, end of year payment for all Enterprise Agreement-covered employees, incentivised Employee Referral Program and novated lease options.

We celebrate, value and include people of all backgrounds, genders, identities, cultures and abilities. We welcome and support applications from First Nations people, physically, neuro or culturally diverse, LGBTQI+, and people of any age. We are proud to be WGEA accredited as an Employer of Choice for Gender Equity.

We want all candidates to feel safe, included and provided with the best opportunity to thrive, if you require reasonable adjustments during your application or throughout the recruitment process, please reach out to a member of the Talent team [e-mail] and we'll call you to discuss.

Please note: Applications via recruitment agencies will not be accepted for this position.

HESTA Superannuation Fund Number (SFN): 129638949. HESTA Australian Business Number (ABN): 64 971 749 321