Security Engineer

Xceltium; Sydney; On-site; AUD 180,000 - 200,000; Full time

Job summary

xceltium is seeking a hands-on Security Engineer to become its primary internal cyber security specialist within a growing healthcare organisation. You will turn security findings into actionable improvements and see them through to resolution.

Join during a major security uplift and work across cloud security, identity, endpoints, security operations and network security with autonomy, mentoring, and external support as you continue developing expertise.

Qualifications

• Hands-on security engineering experience with strong Azure security knowledge.
• Experience interpreting SIEM/MDR reporting and driving remediation.
• Practical knowledge of Active Directory and Microsoft Entra ID security.
• Experience with endpoint security, EDR, and Microsoft Intune.
• Solid networking and firewall security fundamentals.
• Ability to assess risk, communicate recommendations, and collaborate with teams.

Responsibilities

• Review security reporting and vulnerability findings and develop remediation plans.
• Interpret security alerts and drive remediation with prioritisation.
• Improve Azure security controls and configurations; involvement in AWS.
• Strengthen AD and Entra ID controls including MFA and CA.
• Improve endpoint protection with Intune and CrowdStrike.
• Review FortiGate configurations and collaborate with external providers.
• Contribute to Essential Eight uplift, penetration testing, security awareness, and vulnerability management.

Skills

Azure security

SIEM/MDR analysis

Active Directory

Entra ID

Endpoint security

Intune

Networking basics

Firewall security

Vulnerability remediation

Tools

Arctic Wolf

CrowdStrike

FortiGate

Job description

In larger cyber security teams, it's easy to become highly specialised.

You might investigate threats, identify vulnerabilities or recommend improvements, but rarely get to see the work through to resolution.

Our client is an established, growing multi-site healthcare organisation looking for a Security Engineer to become its primary internal cyber security specialist.

Here, you'll be responsible for turning security findings into practical improvements and seeing them through to resolution.

The Opportunity

The organisation is undertaking a significant cyber security uplift, supported by external specialists. You'll join while that work is underway, helping embed the improvements and maintain the controls being established.

You'll work closely with technology leadership, with genuine autonomy over day-to-day security engineering decisions. Mentoring and external specialist support will be available as you continue developing your expertise.

You'll work across cloud security, identity, endpoints, security operations and network security, rather than being limited to one discipline.

Your work will also help protect sensitive patient information and the systems healthcare professionals rely on to deliver care.

What You'll Be Doing

Your initial focus will be reviewing existing security reporting, understanding key vulnerabilities and developing a practical remediation plan.

Your responsibilities will include:

• Security operations: Interpret security alerts, Arctic Wolf MDR reporting and vulnerability findings, prioritise material risks and drive remediation.
• Cloud security: Improve security controls and configuration across Microsoft Azure, with some involvement in AWS.
• Identity and access: Strengthen Active Directory and Microsoft Entra ID controls, including MFA, Conditional Access and privileged access.
• Endpoint security: Improve device compliance, application security and endpoint protection using Microsoft Intune and CrowdStrike.
• Network security: Review and improve FortiGate firewall configurations, policies and controls, working with external providers on more specialised requirements.
• Continuous improvement: Contribute to Essential Eight uplift, penetration testing, security awareness, technical standards and vulnerability management.

What You’ll Bring

We're looking for a hands-on Security Engineer with sound technical judgement, the confidence to work independently and the ability to see security issues through to resolution.

You’ll ideally bring:

• Strong hands-on security engineering experience, with good knowledge of Microsoft Azure security
• Experience interpreting SIEM/MDR reporting, investigating security findings and driving vulnerability remediation
• Practical knowledge of Active Directory, Microsoft Entra ID and identity security
• Exposure to endpoint security, EDR technologies and Microsoft Intune
• Sound networking and firewall security fundamentals
• The ability to assess technical risk, communicate recommendations and work effectively with internal teams and external providers

Experience with Arctic Wolf, CrowdStrike or FortiGate would be valuable, but expertise across every platform isn't essential.

Healthcare experience isn't mandatory. Experience in another regulated or operationally sensitive environment would translate well.

Working Arrangements

This is a permanent position based in North Sydney, with five days per week onsite.

Remuneration is $180,000-200,000 base salary plus superannuation, depending on experience.