Lead Cyber Security Engineer

Mantel Group; Sydney; Hybrid; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Flexible hybrid work

AI tools & resources

Family inclusive culture

Job summary

Mantel Group is seeking a security-focused cloud/DevSecOps engineer to deliver CNAPP-enabled security designs and advisory services for enterprise clients in a flexible hybrid setup across Australia. You will integrate Cortex Cloud, Wiz and other CNAPP tools with client pipelines and cloud platforms.

You will apply security fundamentals, zero-trust concepts, and hands-on engineering to secure DevOps pipelines, cloud networks, and AI-enabled environments while collaborating with Mantel’s delivery

Qualifications

• Extensive CNAPP platforms experience (Cortex Cloud preferred; Wiz or similar).
• Strong cloud/DevSecOps engineering background including CI/CD, IaC and scripting.
• Solid knowledge of security architectures, controls and zero-trust principles.
• Experience delivering security designs and integrating tools into delivery pipelines.

Responsibilities

• Deliver hands-on cloud security engineering and advisory services.
• Act as resident engineer bridging security and Mantel capabilities for client outcomes.
• Design and deploy CNAPP-based security controls across cloud environments.
• Support pre-sales with solution design and effort estimates.

Skills

CNAPP platforms

Cloud engineering

DevSecOps

Security architecture

Tools

Palo Alto Cortex Cloud

Wiz

Terraform

Job description

Mantel is an Australian-owned technology consulting business with capabilities across Cloud, Digital, Data, Delivery & Security. Since our inception in November 2017, we have experienced remarkable growth across Australia & New Zealand and are honoured to be recognised as a Great Place to Work for 7 years in a row!

We hire smart and talented people and get out of their way. As a principle-based organisation we have a flat structure with no hierarchy. By focusing on our five principles and not getting caught up in red tape, we trust you to get the job done!

Working in our growing cyber security capability allows you to work closely with clients across our teams. Our security capabilities span governance, risk and compliance, cyber engineering, and offensive security. We enable large-scale cyber security initiatives for our clients, and improve the protection of IT environments.

About the role

This position will have a wide remit, covering hands-on engineering delivery, resident engineer and advisory work with clients and partners, stakeholder management, and pre-sales support. The role will both deliver direct consulting services to clients in the area of cloud, DevSecOps and AI security design and implementation, as well as act as a bridge between the security engineering team and broader Mantel capabilities to help ensure that the technical solutions we recommend and deliver to clients will achieve the strategic objectives intended.

You’ll bring a strong background in cloud and DevOps engineering, including cloud networking, along with experience in security architecture, solution design and a broad range of security controls and solutions. The role requires a proven ability to develop security solution designs, as well as to integrate and configure security tools into new or existing software delivery pipelines. We value people who understand the security rationale behind a control, not just the product settings.

Whilst this role will have a focus around CNAPP platforms (Palo Alto Networks Cortex Cloud and Wiz), we are not expecting this to be the entirety of the role, with application across DevSecOps, SASE, cloud network security, AI security and general cloud security expected.

Understanding client business requirements, current strategies, technologies, limitations and translating them into robust, justifiable security solution definitions.

Delivering large scale cloud security projects to drive Continuous Threat Exposure Management (CTEM) outcomes for enterprise customers, in particular using CNAPP and exposure management platforms such as Palo Alto Networks Cortex Cloud and Wiz

Designing and deploying security controls, including policy as code (e.g. OPA/Rego, Checkov), across the following use cases:

Application security - securing developer pipelines and workflows, including SAST, SCA, secrets and IaC scanning in CI/CD, with findings routed to Jira or ServiceNow

Cloud Platform Security - CSPM, CIEM and DSPM using platforms such as Cortex Cloud and Wiz

Run time security - Both agent and agentless based approach deploying EDR and CWPP and providing unified SecOps outcomes for predominantly cloud native environments

Engineering and migration work on CNAPP rollouts, including onboarding cloud accounts, code repositories and workloads, and moving clients off legacy tooling

Integrating CNAPP platforms with each client’s wider stack, such as CrowdStrike, Qualys, ServiceNow, SIEM and CI/CD tooling, so findings reach the people who fix them

Working as a resident engineer with clients and partners: advising on platform use, running enablement sessions and handing over to operations teams

Developing designs encompassing security infrastructure, platforms and services. This may include network security group policies, IAM controls, data loss prevention protection policies and more.

Reviewing, designing and implementing secure solutions across major cloud providers (AWS, Azure, Google)

Support key security partnerships with partners like Palo Alto and Wiz , keeping informed of product developments and releases and maintaining relationships with key Palo and Wiz system and product SE’s

Supporting sales and pre-sales activities with clients, including solution design, effort estimates and SOW input

What you’ll need to be successful:

A strong DevOps and cloud engineering foundation: building CI/CD pipelines (e.g. GitHub Actions, GitLab CI or Azure DevOps), writing Terraform or other IaC, scripting in Python or Bash, and designing cloud networking in AWS and/or Azure

Extensive knowledge and hands‑on experience with CNAPP platforms (Palo Alto Networks Cortex Cloud preferred; Wiz or comparable platforms also considered), specifically experience with one of below solutions

• Cortex (CNAPP)
• Prisma access (SASE)
• Software firewalls

Experience in designing, implementing and maintaining security solutions and control implementations; primarily in cloud and / or hybrid environments

Solid grounding in security fundamentals (CIA triad, least privilege, defence in depth, encryption, logging and monitoring) and cloud security basics across AWS and Azure

Strong knowledge of zero trust principles and architectures, as well as their practical limitations and inhibitors to successful implementations

Comfortable using AI coding assistants and agents to speed up your own engineering work, with a sensible view of where they need guardrails

Willingness to continually upskill and flex across platforms and clients as demand shifts; including learning new technologies and obtaining new certifications

Experience in mentoring and leading junior consultants

Experience in providing technical security leadership within project teams and projects

Comfortable working embedded in client and partner teams as a resident engineer: managing your own workload, raising risks early and leaving clear documentation and handover behind

Experience working in regulated environments

Excellent written and verbal communication skills including the ability to liaise with and influence diverse stakeholder groups

Nice to have:

• Some Palo Alto product certifications such as PCSSE or presales certifications including PSE-SASE, PSE-Strata , PSE-Cortex or Palo Alto Networks certifications or partner accreditations (e.g. Cloud Security Professional, PSE SASE Professional, PSE Software Firewall Professional), or Wiz accreditations (e.g. Wiz Cloud Delivery Professional)
• Cloud security certifications (AWS, Azure or Google Cloud)
• Experience securing Kubernetes and containers (CKS a plus)
• Hands-on experience implementing security solutions SASE/SSE design and implementation (Prisma Access preferred; Zscaler or Netskope equally relevant), ideally deployed and integrated through Terraform and policy as code
• Palo Alto Networks software or cloud firewalls (e.g. Cloud NGFW) managed through Strata Cloud Manager
• Experience securing AI and agentic workloads, such as Prisma AIRS, AI-SPM in Cortex Cloud or Wiz, or MCP and agent permission controls
• Experience working with risk management systems and reporting systems.

What you can expect from us:

You’ll get all the tools you need to hit the ground running including a new phone, laptop & swag.

We believe in unique experiences for all. Our My Deal program allows you to tailor your yearly plan, with the support of your Leader, to decide on what’s most important to you. That might be extra professional development, extra annual leave, time to work on your side hustle, or something else completely different! One size does not fit all.

Mantel is a certified Family Inclusive Workplace, which means we are committed to improving your wellbeing at work through leading practices on flexible work, parental leave, family care and family wellbeing

A true investment in your AI-first career. We are a fully AI-enabled consultancy and provide you with the tools to lead. This includes access to the Mantel AI Gateway, our secure, centralised platform with multiple AI models, plus a dedicated monthly budget and a safe environment to experiment and innovate.

You’ll be genuinely supported by an organisation that cares about not only you but your family as well, Mantel offers Flexible Personal Leave options for those unplanned moments in life.

We support a flexible hybrid approach to working which is guided by our principles; we trust each other to “make good choices” about the best workplace locations for the requirements of the project, role and client. This can change based on our client needs.

We know you won’t have one job for life. At Mantel, we believe in supporting our team to take their career in a direction that aligns with their passions. We have internal opportunities across Cloud, Data, Digital, Delivery & Security.

Our elite partnerships are a direct result of our deep platform mastery. For you, this means you'll be working alongside teams with the highest levels of technical expertise and tackling the most complex, high-profile projects on the market.

We value a diverse workplace and strongly encourage people from all backgrounds and minority groups to apply.