Platform Security Engineer – Kubernetes & SIEM

NEP Australia; City of Melbourne; On-site; AUD 140,000 - 180,000; Full time

Benefits offered by this job

Salary continuance insurance

NEP Days - 5 extra leave per year

NEP Travel benefits & discounts (QANTa

Discounts through Employment Hero Work

Employee Assistance Program

Job summary

NEP Australia is seeking a Security Engineer to secure and optimise the platform infrastructure that supports NEP's next-generation media and broadcast services. You will implement SIEM, microsegmentation, and access controls, integrating security into CI/CD and IaC workflows within Kubernetes-based environments.

You will collaborate with the IT Security team and Platform Infrastructure group to align with ISO 27001/SOC2 frameworks, drive remediation after audits, and enhance observability

Qualifications

• Proven experience in platform security, DevSecOps, or SRE roles within containerized/Kubernetes environments.
• Expertise in designing and managing SIEM solutions for real-time threat detection and incident response.
• Hands-on experience implementing microsegmentation in Kubernetes or hybrid cloud environments to secure workloads.
• Proficient in integrating security into CI/CD pipelines.
• Strong knowledge of Kubernetes security practices, including RBAC, admission controllers, PSPs/OPA/Kyverno, and workload isolation.
• Experience with infrastructure-as-code and security scanning tools.
• Proficiency in Linux systems and automation scripting in Bash, Python, or Go.
• Familiarity with vulnerability management, identity and access management (IAM), and cloud security best practices.
• Ability to participate in audits, understand compliance requirements, and coordinate remediation efforts effectively.

Responsibilities

• Design and implement SIEM solutions to monitor, detect, and respond to security threats across platform infrastructure.
• Develop and enforce microsegmentation policies to enhance workload isolation and reduce attack surfaces in Kubernetes and hybrid environments.
• Integrate security controls into CI/CD pipelines, container build processes, and infrastructure-as-code workflows using tools like Terraform.
• Automate vulnerability and compliance scanning for infrastructure
• Implement Kubernetes-native security mechanisms, including RBAC, OPA/Gatekeeper, Kyverno, and network policies, to secure containerized workloads.
• Manage secret management systems (e.g., 1Password) within platform automation workflows.
• Enhance platform observability by integrating logging, tracing, metrics, and alerting tools to support security monitoring and incident response.
• Collaborate with NEP IT Security and TSC SME group on IT Security to align platform infrastructure with global security policies and compliance frameworks (e.g., ISO 27001, SOC2).
• Lead remediation efforts for platform infrastructure following security audits and penetration tests, ensuring timely and effective resolution.
• Represent the Platform team in internal IT security meetings, external conferences, and audits, disseminating learnings and driving improvements.
• Define and enforce access controls across Kubernetes, GitHub, cloud resources, and internal tools to ensure least privilege principles.
• Work with Site Reliability Engineers (SRE) to maintain platform reliability, observability, and security under load and during failure conditions.

Skills

Platform security

DevSecOps

Kubernetes security

SIEM / threat detection

Infrastructure as code

RBAC / OPA / Kyverno

CI/CD integration

Scripting Bash/Python/Go

Cloud security best practices

Tools

Terraform

Kubernetes

1Password

OPA / Gatekeeper / Kyverno

Job description

NEP Australia is seeking a Security Engineer to secure and optimise the platform infrastructure that supports NEP's next-generation media and broadcast services. You will implement SIEM, microsegmentation, and access controls, integrating security into CI/CD and IaC workflows within Kubernetes-based environments.

You will collaborate with the IT Security team and Platform Infrastructure group to align with ISO 27001/SOC2 frameworks, drive remediation after audits, and enhance observability