Lead Security Engineer - Endpoint, Identity & Data Protection

Qantas Airways; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Qantas Airways is seeking a Lead Security Engineer for Endpoint, Identity & Data Protection in a hands-on role in Australia’s cyber defence team. You will influence and deploy security platforms across endpoint, identity and data protection, collaborating with business and technology teams.

With 7+ years in security engineering, you will own platforms, drive improvements, and partner with operations and assurance teams to meet regulatory and PCI DSS obligations.

Qualifications

• Seven+ years of experience in cyber security or technology risk with hands-on security engineering.
• Demonstrated ability to own and operate enterprise security platforms end-to-end.
• Strong knowledge of endpoint, identity and data protection controls.

Responsibilities

• Shape 1-3 year plans for security platforms aligned to group cyber strategy.
• Evaluate new capabilities, run proof of value, deploy to production.
• Own platforms post-deployment including health reporting and policy tuning.
• Govern controls, risks, vendors and service performance to meet regulatory needs.
• Support Security Operations Centre with detections and telemetry.

Skills

EDR

ITDR

Network Security

Secure Web Gateway

Email Security

Data Loss Prevention

Cloud Security

SaaS Security

Security Engineering

SIEM

Security Governance

Cybersecurity

Information Security

Education

NIST

ISO 27001

CISSP

CCSP

Tools

AWS

Microsoft 365

CSPM

CASB

Job description

Lead Security Engineer - Endpoint, Identity & Data Protection

• Become a part of our Qantas Group Cyber Defence Team
• Join an amazing team that values and prioritises cyber security, in a hands-on engineering role across the core security platforms that defend the Group!
• Permanent role based in Sydney OR Melbourne

At Qantas, we represent Australia to the world. Our diverse country is known for its unique spirit, mateship, and a can-do attitude. Together we’re strong and resilient, and we work hard to make sure we’re always at our best.

The Lead Security Engineer - Endpoint, Identity & Data Protection ownsa subset of our core security platforms end to end, from evaluation through deployment and into live service. The portfolio spans endpoint, identity, network edge, web gateway, email gateway, data protection, cloud security, SaaS security, and AI detection and response, and there is scope to specialise in a subset of it.

This is a hands-on tools engineering role and relationships are central to it. You will partner with business and technology teams across the Group on control coverage and effectiveness.

Responsibility’s including

• Shape the 1-3 year plan for your platforms, aligning priorities with the broader Cyber strategy, business goals and emerging technology opportunities.
• Identify new capability, run the evaluation and proof of value, and take the technology through deployment into production and steady state service.
• Own your platforms once live, including control health reporting, policy tuning, coverage and continuous improvement.
• Build strong partnerships across business, technology, vendors and industry peers, and govern controls, risks, suppliers and service performance to support regulatory, privacy and PCI DSS obligations.
• Service our Security Operations Centre with the detections and telemetry they need, and partner with Cyber Assurance to keep controls evidenced.

What you will bring

• At least seven years' experience in cyber security, information security or technology risk, including hands-on experience as a security engineer or in a closely aligned technical role.
• Technical Skils:Endpoint Detection & Response (EDR), Identity Threat Detection & Response (ITDR), Network Security, Secure Web Gateway, Email Security, Data Loss Prevention (DLP), Cloud Security, SaaS Security, Security Engineering, SIEM, Security Governance, Cybersecurity, Information Security
• Emergent Tech - AI Detection & Response would be advantageous
• Demonstrated experience owning and operating enterprise security platforms in a business-as-usual environment, with particular strength in endpoint and identity controls.
• Experience securing cloud and SaaS environments, including AWS, Microsoft 365, CSPM and CASB controls.
• Proven experience taking a security technology from evaluation through deployment and into production.
• Experience managing security service providers to agreed SLAs, and supporting security operations with detection content and telemetry.
• Experience conducting cyber security and technology risk assessments, and developing security governance, policies, standards and control frameworks.
• Strong analytical and problem-solving skills, with the ability to translate technical risks into clear business impacts and recommendations.
• Excellent stakeholder management, influencing, advisory and communication skills, including executive-level reporting.
• Strong people skills, ability to connect with others and end to end technical management and precuring the technology into deployment through strong communication and engagement skills
• Experience in large, complex or regulated environments, such as aviation, financial services or critical infrastructure. AI based cyber threat experience is highly advantageous.
• Desirable experience with relevant frameworks and certifications, including NIST, ISO 27001, Essential Eight, SOCI, PCI DSS, CISSP, CCSP or CISM.

Please note: We have more than one opportunity open in Group Cyber Defence! If your background is in API security, DNS or edge protection, see our other Manager Group Cyber Defence advertisement.

Why Qantas?

You’ll join a team where creativity and passion are encouraged. Our people come together to allow us to dream big and deliver successfully.

There are many different opportunities across our team, which means you’ll be able to grow both personally and professionally at Qantas. Your development is a priority for us – so that you can maintain the high standards our customers have come to expect and can continue to develop over time. You’ll be supported from day 1 with on-the-job training and coaching as well as our formal training opportunities. While you may start in this role, we’ve got a great track record of supporting our people to take their career in so many different directions, the destinations are endless.

The Qantas employee benefits program offers amazing benefits that extend well beyond travel.

• We love to travel:Enjoy heavily discounted air travel within Australia and across the globe, both for you and your family and friends, as well as exclusive deals on accommodation and holidays.
• We have flexible leave options:Make use of leave and flexible working opportunities including 18 weeks paid parental leave and the option to purchase additional paid leave for eligible employees.
• We’ll give you access to thousands of rewards:Through our partnerships we can offer you discounts across shopping, food and wine, insurance, health and wellbeing, leisure and entertainment.You can also take advantage of our salary packaging program including motor vehicles, eligible portable electronic devices and professional memberships.
• We’ll support your wellbeing:Whether it’s learning to better support your own and others’ mental health, our interactive wellbeing app or your very own tailored nutrition plan.

Qantas is an equal opportunity employer committed to providing a working environment that embraces and values diversity and inclusion. By coming to work for us, you’ll be part of an organisation that encourages diversity, supports charities and environmental initiatives. We encourage Aboriginal and Torres Strait Islander, and people of all backgrounds to apply. If you have any support or access requirements, we encourage you to advise us at time of application. Your personal information will be kept confidential in compliance with relevant privacy legislation.

Please note: applications will only be considered for candidates who have the right to work in Australia / New Zealand without restriction or sponsorship.

Applications will close by the 26th of October