IT Security Engineer

PRA; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

PRA in Sydney, Australia is seeking a hands-on Senior Cyber Security Engineer to join a small, close-knit Information Security team. You will design and implement controls across multi-cloud environments and influence security tooling and architecture.

You will collaborate with infrastructure and application teams, support incident response, risk assessments, and drive security maturity through CIS, Essential Eight, and ISO 27001 alignment.

Qualifications

• Hands-on Azure and AWS security engineering experience.
• Experience implementing security tools and platforms.
• Knowledge of CIS, NIST, CIS and ISO 27001, ACSC Essential Eight.
• Strong communication with stakeholders.

Responsibilities

• Design, build and manage security controls across Azure and AWS.
• Deploy, integrate and maintain security tooling such as XDR, Zero Trust, vulnerability scanning and CSPM.
• Harden systems, applications and cloud services, aligning configurations with CIS, Essential Eight and ISO 27001.
• Act as the go-to technical advisor for infrastructure and application teams on secure architecture and deployment.
• Support incident response, forensics, risk assessments and pen test remediation alongside SecOps, risk and compliance teams.

Skills

Azure

AWS

Security engineering

Cloud-native controls

IAM

Communication

Tools

XDR

CSPM

Vulnerability scanning

Zero Trust

Job description

• Join a national, member-based peak organisation in the transport sector whose work supports government agencies and the wider public


• A hands-on senior engineering role inside a small, close-knit Information Security team


• Real influence over how security is engineered across a multi-cloud (Azure and AWS) environment


• A chance to shape tooling, automation and controls, not just keep the lights on

The role

• Design, build and manage security controls across Azure and AWS, including IAM, network security, logging and monitoring


• Deploy, integrate and maintain security tooling such as XDR, Zero Trust, vulnerability scanning and CSPM, making sure alerting and reporting actually work


• Harden systems, applications and cloud services, aligning configurations with CIS, Essential Eight and ISO 27001


• Act as the go-to technical advisor for infrastructure and application teams on secure architecture and deployment


• Support incident response, forensics, risk assessments and pen test remediation alongside SecOps, risk and compliance teams

What you'll bring

• Significant experience in cyber security engineering, with strong hands-on Azure and AWS experience


• A proven track record implementing and managing security tools and platforms


• Strong knowledge of cloud-native security controls, identity and access management, and infrastructure hardening


• Working familiarity with ISO 27001, NIST, CIS and the ACSC Essential Eight


• Clear communication skills and the ability to work with people at every level, from engineers to business stakeholders

Nice to have: CISSP, AWS Certified Security Specialty or Azure Security Engineer Associate; scripting or automation (PowerShell, Python, Terraform); exposure to container security, CI/CD and DevSecOps; experience supporting technical audits.

Culture

• A collaborative environment where security works closely with technology and business teams


• Autonomy to work independently and own your priorities


• A fast-paced, evolving environment with genuine room to improve how things are done


• Support for ongoing professional development and learning