Security Engineer

xceltium; North Sydney; On-site; AUD 180,000 - 200,000; Full time

Job summary

xceltium is partnering with a healthcare organisation in North Sydney to recruit a Security Engineer who will become its primary internal cyber security specialist. You’ll turn security findings into practical improvements and see them through to resolution, with genuine autonomy over day-to-day security engineering decisions.

You’ll work across cloud security (Azure with some AWS), identity and access, endpoint protection (Intune, CrowdStrike) and network security (FortiGate).

Qualifications

• Hands-on security engineering experience with practical Azure security knowledge.
• Experience interpreting SIEM/MDR reporting and driving remediation.
• Practical knowledge of Active Directory and Microsoft Entra ID security.
• Experience with endpoint security, EDR tools, and device management.

Responsibilities

• Review security reporting, identify vulnerabilities, and develop remediation plans.
• Interpret alerts and prioritise material risks to drive remediation.
• Improve security controls across cloud and on-premises environments.
• Strengthen identity controls including MFA and conditional access.

Skills

Azure security

SIEM/MDR analysis

Active Directory / Microsoft Entra ID

Endpoint security / EDR

Network/security

Risk assessment & remediation

Communication & stakeholder engmt

Job description

In larger cyber security teams, it's easy to become highly specialised.

You might investigate threats, identify vulnerabilities or recommend improvements, but rarely get to see the work through to resolution.

Our client is an established, growing multi-site healthcare organisation looking for a Security Engineer to become its primary internal cyber security specialist.

Here, you'll be responsible for turning security findings into practical improvements and seeing them through to resolution.

The Opportunity

The organisation is undertaking a significant cyber security uplift, supported by external specialists. You'll join while that work is underway, helping embed the improvements and maintain the controls being established.

You'll work closely with technology leadership, with genuine autonomy over day-to-day security engineering decisions. Mentoring and external specialist support will be available as you continue developing your expertise.

You'll work across cloud security, identity, endpoints, security operations and network security, rather than being limited to one discipline.

Your work will also help protect sensitive patient information and the systems healthcare professionals rely on to deliver care.

What You'll Be Doing

Your initial focus will be reviewing existing security reporting, understanding key vulnerabilities and developing a practical remediation plan.

Your responsibilities will include:

• Security operations: Interpret security alerts, Arctic Wolf MDR reporting and vulnerability findings, prioritise material risks and drive remediation.

• Cloud security: Improve security controls and configuration across Microsoft Azure, with some involvement in AWS.

• Identity and access: Strengthen Active Directory and Microsoft Entra ID controls, including MFA, Conditional Access and privileged access.

• Endpoint security: Improve device compliance, application security and endpoint protection using Microsoft Intune and CrowdStrike.

• Network security: Review and improve FortiGate firewall configurations, policies and controls, working with external providers on more specialised requirements.

• Continuous improvement: Contribute to Essential Eight uplift, penetration testing, security awareness, technical standards and vulnerability management.

What You’ll Bring

We're looking for a hands-on Security Engineer with sound technical judgement, the confidence to work independently and the ability to see security issues through to resolution.

You’ll ideally bring:

• Strong hands-on security engineering experience, with good knowledge of Microsoft Azure security

• Experience interpreting SIEM/MDR reporting, investigating security findings and driving vulnerability remediation

• Practical knowledge of Active Directory, Microsoft Entra ID and identity security

• Exposure to endpoint security, EDR technologies and Microsoft Intune

• Sound networking and firewall security fundamentals

• The ability to assess technical risk, communicate recommendations and work effectively with internal teams and external providers

Experience with Arctic Wolf, CrowdStrike or FortiGate would be valuable, but expertise across every platform isn't essential.

Healthcare experience isn't mandatory. Experience in another regulated or operationally sensitive environment would translate well.

Working Arrangements

This is a permanent position based in North Sydney, with five days per week onsite.

Remuneration is $180,000–$200,000 base salary plus superannuation, depending on experience.