Security Engineer - Operations

George Weston Foods Limited; Sydney; On-site; AUD 120,000 - 150,000; Full time

Job summary

George Weston Foods Limited is seeking a Security Engineer – Operations to own day-to-day security operations, improve cyber risk posture and guide security across enterprise and cloud environments. You will work across incident response, vulnerability management and security engineering, delivering practical guidance and measurable outcomes.

The role involves hands-on work with SIEM, Defender, Entra ID, Zscaler and automation to streamline processes, with opportunities to lead security

Qualifications

• Tertiary qualifications in a technology discipline with security certifications are preferred.
• Experience in enterprise infrastructure and cloud environments, with monitoring and security operations.
• Strong knowledge of information security principles, controls and standards.

Responsibilities

• Investigate security alerts, incidents and perform containment, eradication and recovery.
• Administer and optimise security technologies (e.g., SIEM, Defender, Entra ID, Zscaler).
• Conduct threat hunting and proactive security investigations to mitigate threats.
• Coordinate vulnerability management and remediation activities by risk.
• Participate in security reviews of projects and changes, offering practical guidance.
• Deliver security awareness initiatives and phishing simulations to improve culture.
• Develop scripts and workflows to automate security processes.
• Support security roadmap initiatives and strategic projects.

Skills

Security operations

PowerShell

Python

APIs

Automation

Education

Bachelor degree in a relevant technology field

CISSP

Security+

MCSE Security

Tools

SIEM

Endpoint protection

Vulnerability management

Security platforms

Job description

Select how often (in days) to receive an alert:

George Weston Foods makes some of Australia and New Zealand’s favourite and most innovative products! Chances are that one of our iconic brands is sitting on your table, packed in your lunchbox or resting in your pantry right now. Join the team and be part of one of our iconic brands like Tip Top, Abbotts Village Bakery, Burgen, Golden, DON, KR Castlemaine and Yumi’s.

Key Responsibilities

As a Security Engineer – Operations, you will be responsible for the day-to-day operation, administration and continuous improvement of GWF’s cyber security capabilities. Working across security operations, incident response, vulnerability management, security engineering and advisory services, you will play a key role in reducing cyber risk across enterprise and cloud environments. This hands-on role focuses on operating and improving security technologies, investigating security events and providing practical security guidance to stakeholders. It is ideally suited to a well‑rounded security professional who enjoys working across technology, people and process domains to deliver measurable security outcomes.

On a day-to-day basis, you will:

• Investigate security alerts, suspicious activity and security incidents, coordinating containment, eradication and recovery activities where required.
• Administer, maintain and optimise security technologies including Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID security controls, Zscaler and vulnerability management platforms.
• Conduct threat hunting activities and proactive security investigations to identify and mitigate emerging cyber threats.
• Operate vulnerability management processes, coordinate security assessments and drive remediation activities based on risk.
• Participate in security reviews of projects, systems and technology changes, providing practical recommendations and security guidance.
• Deliver security awareness initiatives, phishing simulations and targeted training activities to promote a positive security culture.
• Develop scripts, integrations and workflows to automate security processes and improve operational effectiveness.
• Support the delivery of security improvement initiatives, strategic projects and security roadmap activities.

About You

The ideal candidate will have:

• Tertiary qualifications in a relevant technology discipline, with security certifications such as CISSP, Security+, MCSE Security or equivalent highly regarded.
• Demonstrated experience working within enterprise infrastructure and cloud environments, with a solid understanding of monitoring, logging and security operations.
• Strong understanding of information security principles, security controls, protocols and industry standards.
• Hands‑on experience with security technologies such as SIEM, endpoint protection, vulnerability management, intrusion detection and related security platforms.
• Experience using PowerShell, Python, APIs, workflow automation or low‑code/no‑code tools to improve security operations and efficiency.
• Strong stakeholder engagement, communication and relationship‑building skills, with the ability to translate technical risks into practical business guidance.
• Proven analytical and problem‑solving skills, with the ability to identify issues, prioritise actions and deliver practical outcomes.

During the recruitment process you may be required to complete pre‑employment screening tests which include a criminal record check.

At GWF we strive to create a place where everyone belongs, everyone is valued, and everyone has equal opportunity. We encourage applications from people of all ages, nationalities, abilities, and cultures – including Aboriginal and Torres Strait Islander peoples, the LGBTQI+ community and people living with disability. So we can get to know you in the best possible way, we're happy to adjust our recruitment process to support accessibility needs. Let us know your needs in providing a positive, barrier-free recruitment process viaemail to [e-mail].