IT Security Engineer

BMD Group; City of Brisbane; On-site; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Career growth

Awards program

Mental health support

Flexible work

Power Perks

Job summary

BMD Group in Australia is seeking an IT Security Engineer to strengthen cyber security capabilities and protect data assets across the organisation. You will monitor risks, investigate incidents and help evolve our security operations under the CISO.

You will work with Purview, Defender XDR, Entra ID and MS 365 Security & Compliance, develop policies, and deliver meaningful security reports to both technical and non-technical stakeholders.

Qualifications

• Degree in Cyber Security, IT or Information Systems or related discipline.
• 3+ years in cyber security operations, insider risk, data protection or security analytics.
• Hands-on experience with Microsoft Purview, Defender XDR, Entra ID and MS 365 Security & Compliance.
• Professional certifications such as CISSP or similar are a plus.

Responsibilities

• Monitor cyber security risks, incidents and threats across the organisation.
• Investigate incidents and perform risk assessments with stakeholders.
• Develop and maintain security policies, controls and processes.
• Analyse user activity and security trends to strengthen security posture.
• Prepare reports and dashboards for technical and non-technical stakeholders.

Skills

Cyber security operations

Insider risk management

Data protection

Security analytics

Risk assessment

Communication skills

Collaboration

Education

Degree in Cyber Security/IT/Information Systems

Tools

Microsoft Purview

Defender XDR

Entra ID

Microsoft 365 Security & Compliance

KQL

Microsoft Sentinel

Power BI

Cloud security platform experience

Job description

About BMD

At BMD, we’re powering futures and creating enduring legacies through a commitment to collaboration. Our values of Family, Driven, Empowered and Collaborative guide how we operate every day. We are a leading integrated engineering, construction and urban development business with a growing international presence in the UK, Philippines and across Australia.

About BMD

At BMD, we’re powering futures and creating enduring legacies through a commitment to collaboration. Our values of Family, Driven, Empowered and Collaborative guide how we operate every day. We are a leading integrated engineering, construction and urban development business with a growing international presence in the UK, Philippines and across Australia.

For over 46 years, we’ve delivered complex infrastructure solutions that connect and transform communities.

Join us to make a lasting impact and be part of a values-driven organisation that prioritises growth, learning and collaboration.

About The Role

As our IT Security Engineer, you'll play a key role in safeguarding BMD's information systems, data and digital assets by helping to strengthen our cyber security capabilities and protect the business against evolving threats. Working as part of our Information Technology team and reporting to the Chief Information Security Officer (CISO), you'll be responsible for monitoring security risks, investigating incidents, enhancing data protection practices and supporting the ongoing improvement of our security operations. You'll work across the business to identify opportunities to strengthen security controls, leverage emerging technologies, and contribute to the continuous evolution of our cyber security strategy.

Your Accountabilities

• Effective operation of Microsoft Purview security capabilities.
• Timely detection and investigation of insider risk events.
• Reduction of data leakage incidents.
• Continuous improvement of user behaviour monitoring.
• Adoption of AI-enhanced security capabilities.
• Production of meaningful security intelligence and reporting.

You Are

• Highly analytical and investigative mindset.
• Strong problem-solving capability.
• Curious and proactive approach to risk identification.
• Excellent written and verbal communication skills.
• Ability to explain complex security events to non-technical audiences.
• Strong attention to detail and evidence-based decision making.
• Passion for emerging AI and cyber security technologies.

Your Responsibilities

• Monitor, identify and respond to cyber security risks, incidents and emerging threats across the organisation.
• Support the protection of sensitive information by implementing and continuously improving data security and governance practices.
• Investigate security events, conduct risk assessments and work collaboratively with stakeholders to drive timely resolution and remediation.
• Analyse user activity and security trends to identify potential risks and provide actionable insights that strengthen the organisation's security posture.
• Develop, maintain and enhance security policies, controls and processes to support compliance and reduce cyber risk.
• Leverage emerging technologies and automation to improve security operations, incident response and operational efficiency.
• Contribute to the continuous improvement of cyber security capabilities through proactive monitoring, threat analysis and innovation.
• Prepare meaningful reports and dashboards to communicate security trends, risks and recommendations to technical and non-technical stakeholders.
• Provide subject matter expertise and guidance to support secure business practices and informed decision-making across the organisation.
• Stay abreast of emerging cyber security threats, technologies and industry best practices to help strengthen the organisation's resilience.

You Have

• A degree in Cyber Security, IT, Information Systems or a related discipline.
• 3+ years’ experience in cyber security operations, insider risk management, data protection or security analytics.
• Strong, hands‑on experience with Microsoft Purview, Defender XDR, Entra ID and Microsoft 365 Security & Compliance.
• Ideally, Microsoft certifications (Information Protection Administrator, Cybersecurity Architect, Security Operations Analyst or Security Administrator) and/or CISSP, CISM, SC-400, SC-200 or SC-100.
• A bonus if you bring KQL, Microsoft Sentinel, Power BI or broader cloud security platform experience.

Benefits

We support our people to thrive both personally and professionally. This includes:

• Career growth with tailored learning and development programs.
• Recognition through annual awards and our Thrive platform.
• Mental health support and wellbeing initiatives.
• Flexible working arrangements to support your life and family.
• Access to perks including Power Perks, novated leasing and retail discounts.