Security Engineer

Humm BNPL; Sydney; On-site; AUD 100,000 - 170,000; Full time

Job summary

hummgroup is seeking a Security Engineer to join our Cyber Security and Transformation program. You will protect information and technology assets, work hands-on with modern security tools, and help enhance our cyber resilience across on-premises and cloud environments.

You will monitor threats, investigate incidents, configure security controls, and collaborate with cross-functional teams to improve detection, response, and risk posture in a fast-paced setting.

Qualifications

• 3+ years of experience in a cyber security role such as Security Analyst, Security Engineer, or similar.
• Relevant certifications and/or tertiary education, such as Security Operations, CompTIA CySA+, AWS / Microsoft security certifications or similar vendor-specific certifications for SIEM, EDR, firewalls, cloud security, or DLP.
• Experience with SIEM platforms, automation, threat hunting and intelligence.
• Firewalls, proxies, secure web gateways, endpoint detection and response, application whitelisting, routers, switches, micro-segmentation, NDR, DLP, SSE and web application firewalls.
• Microsoft 365, AWS, Azure, Windows Server, Linux/Unix, iOS and Android.
• Web application security, vulnerability scanning, DevSecOps pipelines, penetration testing support.

Responsibilities

• Monitor and assess security threats, vulnerabilities and events across SIEM, endpoint, network, email, web, DLP and cloud security platforms.
• Investigate cyber security incidents, conduct threat hunting and root-causes analysis, and turn lessons learned into stronger detection and response.
• Implement, configure and optimise security tools and controls across identity, endpoint, network, application and cloud environments.
• Manage vulnerability scanning, system hardening, attack surface reduction and remediation validation.
• Support cyber risk assessments, audits and compliance activities across on-premises, cloud, SaaS and third-party environments.
• Coordinate security testing, DevSecOps, penetration testing and assurance activities with internal teams and external partners.
• Produce security dashboards and reports, build trusted stakeholder relationships, promote security awareness and participate in the on-call rotation as required.

Skills

Cyber security

Threat hunting

Analytical thinking

Communication

Education

Tertiary education in related field

Tools

SIEM platforms

EDR

Cloud security

Firewall management

DevSecOps pipelines

AWS

Azure

Job description

We Dream. We Design. We Deliver. Join hummgroup, one of Australasia’s most successful and enduring non-bank financial services institutions. We specialise in fast, easy finance with a market-leading range of business asset finance, credit cards and point of sale payment plan solutions designed around the core needs of today’s businesses and retail consumers. Come join our team and be a part of our next chapter of innovation and growth.

About the role

The Security Engineer plays a critical role within the organisation’s Cyber Security and Humm 3.0 Transformation program, protecting information and technology assets in an increasingly complex threat landscape. This role offers the opportunity to work hands-on with modern security technologies, tools, and frameworks, contributing directly to the organisation’s cyber resilience and risk posture. You will collaborate with cross-functional teams, analyse threats, respond to incidents, and support continuous improvement of security controls. Ideal for technically capable cyber security professionals, this role suits someone who thrives in fast-paced environments, enjoys solving complex security challenges, and wants their work to have real, visible impact.

Key Responsibilities

• Monitor and assess security threats, vulnerabilities and events across SIEM, endpoint, network, email, web, DLP and cloud security platforms.
• Investigate cyber security incidents, conduct threat hunting and root-causes analysis, and turn lessons learned into stronger detection and response.
• Implement, configure and optimise security tools and controls across identity, endpoint, network, application and cloud environments.
• Manage vulnerability scanning, system hardening, attack surface reduction and remediation validation.
• Support cyber risk assessments, audits and compliance activities across on-premises, cloud, SaaS and third-party environments.
• Coordinate security testing, DevSecOps, penetration testing and assurance activities with internal teams and external partners.
• Produce security dashboards and reports, build trusted stakeholder relationships, promote security awareness and participate in the on-call rotation as required.

Qualifications & Experience

• 3+ years of experience in a cyber security role such as Security Analyst, Security Engineer, or similar.
• Relevant certifications and/or tertiary education, such as: Security Operations, CompTIA CySA+, AWS / Microsoft security certifications or similar Vendor-specific certifications for SIEM, EDR, firewalls, cloud security, or DLP.
• Experience with SIEM platforms, automation, threat hunting and intelligence.
• Firewalls, proxies, secure web gateways, endpoint detection and response, application whitelisting, routers, switches, micro-segmentation, NDR, DLP, SSE and web application firewalls.
• Microsoft 365, AWS, Azure, Windows Server, Linux/Unix, iOS and Android.
• Web application security, vulnerability scanning, DevSecOps pipelines, penetration testing support.
• Experience with risk assessments, SOPs, playbooks, guidelines, compliance frameworks (PCI DSS, ASD Essential 8, ISO 27001, NIST).
• Ability to produce clear operational-level reporting.

About you

• Strong analytical and problem-solving mindset.
• Ability to work independently in fast-paced environments.
• Effective communicator who can simplify technical concepts for non-technical stakeholders.
• Collaborative team player committed to improving organisational security maturity.
• High levels of integrity, accountability and attention to detail.

Working at hummgroup

We embrace flexible working arrangements, ensuring a genuine work-life balance and a fun, vibrant inclusive culture that embraces diverse perspectives and values the unique contributions of each of our team through our behaviours Curious - Adaptable - Tenacious – Accountable - Respectful.

We invite candidates of all gender expressions, ethnicities, ages, and other culturally diverse groups to apply.

We are committed to making reasonable adjustments to provide a positive, barrier-free recruitment process and welcoming and supportive environment where all our people can thrive.

hummgroup is a diversified non-bank financial services institution offering business financing products, credit cards and point-of-sale finance plans designed around the core needs of today’s shoppers, retailers and small to medium enterprises. Our experience as a leader in financing larger purchases – whether through working with our retail partners or making our offers direct to customers – provides the platform, stability, strength and the acumen to support us in our continuing innovation journey in the face of tech and service evolution.

We have built a strong global team of high performing people who are focused on delivering the best customer experience and innovative products.