Security Engineer

NEP Group, Inc.; City of Melbourne; On-site; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Salary continuance insurance

NEP Days - 5 extra leave per year

NEP Travel benefits & discounts

Discounts through Employment Hero Work

Employee Assistance Program

Job summary

NEP Australia is seeking a Security Engineer - NEP Platform to secure and optimise the infrastructure behind NEP's next‑generation media and broadcast services. You will implement platform security measures including SIEM, microsegmentation, and access controls while collaborating with the TSC SME group on IT Security.

Reporting to the Team Lead - Infrastructure & Security, you will work with NEP's global IT Security team to align platform security with enterprise policies, participate in audits

Qualifications

• Proven experience in platform security, DevSecOps, or SRE roles.
• Hands-on with Kubernetes security practices (RBAC, OPA/Kyverno).
• Experience integrating security into CI/CD pipelines.

Responsibilities

• Design and implement SIEM solutions for platform security.
• Develop and enforce microsegmentation in Kubernetes and hybrid environments.
• Integrate security into CI/CD pipelines and IaC workflows (Terraform).
• Lead remediation after security audits and penetration tests.

Skills

Platform security

DevSecOps

Kubernetes security

CI/CD security

Linux automation

IAM & vulnerability management

Audits & compliance

Tools

Terraform

1Password

Job description

Our Company

NEP is Australia's leading provider of outsourced television production services.

We are always looking for great people to join our team; people with a passion for people and teamwork helping us deliver exceptional results for our clients.

NEP Australia is currently looking for a Security Engineer - NEP Platform to secure and optimise the infrastructure that supports NEP's next-generation media and broadcast services. Your primary focus will be on implementing robust platform security measures, including Security Information and Event Management (SIEM), microsegmentation, and access controls, while collaborating with the Technology Steering Committee (TSC) Subject Matter Expert (SME) group on IT Security. You will integrate security practices into platform workflows, automate security controls across Kubernetes-based environments, and ensure platform reliability and observability across hybrid infrastructure.

The position

Reporting to the Team Lead - Infrastructure & Security and you will work closely with NEP's global IT Security team to align platform-level security with enterprise-wide policies. This includes participating in internal security meetings, external audits, penetration tests, and presenting the Platform strategies, while driving actionable outcomes for the Platform Infrastructure team.

This role is ideal for engineers with expertise in platform security, Kubernetes, infrastructure-as-code, and SIEM/microsegmentation, who are passionate about building secure, scalable, and resilient platforms.

Key Responsibilities But Not Limited To

• Design and implement SIEM solutions to monitor, detect, and respond to security threats across platform infrastructure.
• Develop and enforce microsegmentation policies to enhance workload isolation and reduce attack surfaces in Kubernetes and hybrid environments.
• Integrate security controls into CI/CD pipelines, container build processes, and infrastructure-as-code workflows using tools like Terraform.
• Automate vulnerability and compliance scanning for infrastructure
• Implement Kubernetes-native security mechanisms, including RBAC, OPA/Gatekeeper, Kyverno, and network policies, to secure containerized workloads.
• Manage secret management systems (e.g., 1Password) within platform automation workflows.
• Enhance platform observability by integrating logging, tracing, metrics, and alerting tools to support security monitoring and incident response.
• Collaborate with NEP IT Security and TSC SME group on IT Security to align platform infrastructure with global security policies and compliance frameworks (e.g., ISO 27001, SOC2).
• Lead remediation efforts for platform infrastructure following security audits and penetration tests, ensuring timely and effective resolution.
• Represent the Platform team in internal IT security meetings, external conferences, and audits, disseminating learnings and driving improvements.
• Define and enforce access controls across Kubernetes, GitHub, cloud resources, and internal tools to ensure least privilege principles.
• Work with Site Reliability Engineers (SRE) to maintain platform reliability, observability, and security under load and during failure conditions.

Required Skills And Attributes

• Proven experience in platform security, DevSecOps, or SRE roles within containerized/Kubernetes environments.
• Expertise in designing and managing SIEM solutions for real-time threat detection and incident response.
• Hands-on experience implementing microsegmentation in Kubernetes or hybrid cloud environments to secure workloads.
• Proficient in integrating security into CI/CD pipelines.
• Strong knowledge of Kubernetes security practices, including RBAC, admission controllers, PSPs/OPA/Kyverno, and workload isolation.
• Experience with infrastructure-as-code and security scanning tools
• Proficiency in Linux systems and automation scripting in Bash, Python, or Go.
• Familiarity with vulnerability management, identity and access management (IAM), and cloud security best practices.
• Ability to participate in audits, understand compliance requirements, and coordinate remediation efforts effectively.

Benefits

NEP believes that, first and foremost, the efforts of our people are what contribute to our successes. We offer a range of benefits that assist our team in their professional development and wellbeing, including:

• Salary continuance insurance
• NEP Days - additional 5 days of leave per year (conditions apply)
• NEP Travel benefits & discounts including Qantas Club Membership
• Discounts through Employment Hero Work app
• Employee Assistance Program

This is a full-time role and is a unique opportunity for the right person.

You must have the right to live and work in Australia to apply for this job.

Only shortlisted candidates will be contacted.

About Our Process

At NEP, we are committed to employing individuals who align with Our Values and meet the requirements of the role. As part of the recruitment process, there are several checks which may be conducted to demonstrate applicants' suitability for a role including police / criminal background checks, right to work checks, and reference checks.

NEP is the largest media technology partner for content producers of live sports, entertainment, and corporate events globally. For more than 35 years, NEP has been delivering innovative products and services that enable clients to make, manage and show the world their content—anywhere, anytime, on any platform.

As a trusted partner working on some of the largest productions in the world, NEP offers a complete set of end-to-end solutions, from content capture to distribution—including a growing portfolio of transformational cloud-based, software-based and virtualized technologies.

• NEP's Live Production solutions range from AV services and live audience enhancements to traditional outside broadcast and cutting-edge centralized and cloud production.
• NEP's Virtual Production solutions start at the creative stage and end with exceptional execution across ICVFX, augmented reality, LED stages and more.
• NEP's Media Processing solutions provide the tools and products our clients need to ingest, edit, store, search, manage and distribute their digital assets to rights holders across multiple platforms.

Headquartered in the United States, NEP has operations in 25 countries with over 4,000+ employees. Together, NEP has supported productions in over 100 countries on all seven continents and is still growing. Clients range from the leaders in sport, music, film and TV, to major corporate brands, agencies, to new content owners and creators all around the world.

Anywhere, anytime, on any platform—we help our clients make, manage, and show the world their content.