Security Engineer - Operations

George Weston Foods; Sydney; On-site; AUD 140,000 - 180,000; Full time

Job summary

George Weston Foods is seeking a Security Engineer - Operations in Sydney to own day-to-day cyber security operations across on‑premises and cloud environments. You will monitor, respond to alerts and drive risk‑based remediation while partnering with IT and business stakeholders.

The ideal candidate brings enterprise security experience, proven ability to translate technical risk into practical guidance, and hands-on skills with SIEM, Defender, Entra ID and automation tooling.

Qualifications

• Tertiary qualification in a technology discipline with recognised security certs preferred.
• Experience in enterprise infrastructure and cloud security operations.
• Strong knowledge of monitoring, logging and security controls.
• Hands-on with SIEM, endpoint protection and vulnerability management.

Responsibilities

• Investigate security alerts and incidents, coordinating containment, eradication and recovery.
• Administer and optimise security technologies including SIEM, Defender and Entra ID security controls.
• Conduct threat hunting and proactive investigations to mitigate emerging threats.
• Operate vulnerability management and drive remediation based on risk.
• Participate in security reviews and provide practical guidance to projects.
• Deliver security awareness initiatives and phishing simulations.
• Develop scripts and workflows to automate security processes.
• Support security improvement initiatives and roadmap activities.

Skills

Stakeholder engagement

Communication

Analytical thinking

Problem solving

Security governance

Threat detection

Security awareness advocate

Education

Bachelor degree or higher in a relevant field

Security certifications (CISSP, Security+, MCSE Security)

Tools

PowerShell

Python

APIs

Low-code/no-code tools

SIEM

Microsoft Defender

Zscaler

Job description

George Weston Foods makes some of Australia and New Zealand's favourite and most innovative products! Chances are that one of our iconic brands is sitting on your table, packed in your lunchbox or resting in your pantry right now. Join the team and be part of one of our iconic brands like Tip Top®, Abbotts Village Bakery®, Burgen®, Golden®, DON®, KR Castlemaine® and Yumi's®.

Key Responsibilities

As a Security Engineer - Operations, you will be responsible for the day-to-day operation, administration and continuous improvement of GWF's cyber security capabilities. Working across security operations, incident response, vulnerability management, security engineering and advisory services, you will play a key role in reducing cyber risk across enterprise and cloud environments. This hands-on role focuses on operating and improving security technologies, investigating security events and providing practical security guidance to stakeholders. It is ideally suited to a well-rounded security professional who enjoys working across technology, people and process domains to deliver measurable security outcomes. On a day-to-day basis, you will:

• Investigate security alerts, suspicious activity and security incidents, coordinating containment, eradication and recovery activities where required.
• Administer, maintain and optimise security technologies including Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID security controls, Zscaler and vulnerability management platforms.
• Conduct threat hunting activities and proactive security investigations to identify and mitigate emerging cyber threats.
• Operate vulnerability management processes, coordinate security assessments and drive remediation activities based on risk.
• Participate in security reviews of projects, systems and technology changes, providing practical recommendations and security guidance.
• Deliver security awareness initiatives, phishing simulations and targeted training activities to promote a positive security culture.
• Develop scripts, integrations and workflows to automate security processes and improve operational effectiveness.
• Support the delivery of security improvement initiatives, strategic projects and security roadmap activities.

The ideal candidate will have:

• Tertiary qualifications in a relevant technology discipline, with security certifications such as CISSP, Security+, MCSE Security or equivalent highly regarded.
• Demonstrated experience working within enterprise infrastructure and cloud environments, with a solid understanding of monitoring, logging and security operations.
• Strong understanding of information security principles, security controls, protocols and industry standards.
• Hands-on experience with security technologies such as SIEM, endpoint protection, vulnerability management, intrusion detection and related security platforms.
• Experience using PowerShell, Python, APIs, workflow automation or low-code/no-code tools to improve security operations and efficiency.
• Strong stakeholder engagement, communication and relationship-building skills, with the ability to translate technical risks into practical business guidance.
• Proven analytical and problem-solving skills, with the ability to identify issues, prioritise actions and deliver practical outcomes

Company description:

George Weston Foods makes some of Australia and New Zealand's favourite and most innovative products! Chances are that one of our iconic brands is sitting on your table, packed in your lunchbox or resting in your pantry right now. Join the team and be part of one of our iconic brands like Tip Top®, Abbotts Village Bakery®, Burgen®, Golden®, DON®, KR Castlemaine® and Yumi's®.

Job description:

Key Responsibilities

As a Security Engineer - Operations, you will be responsible for the day-to-day operation, administration and continuous improvement of GWF's cyber security capabilities. Working across security operations, incident response, vulnerability management, security engineering and advisory services, you will play a key role in reducing cyber risk across enterprise and cloud environments. This hands-on role focuses on operating and improving security technologies, investigating security events and providing practical security guidance to stakeholders. It is ideally suited to a well-rounded security professional who enjoys working across technology, people and process domains to deliver measurable security outcomes. On a day-to-day basis, you will:

• Investigate security alerts, suspicious activity and security incidents, coordinating containment, eradication and recovery activities where required.
• Administer, maintain and optimise security technologies including Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID security controls, Zscaler and vulnerability management platforms.
• Conduct threat hunting activities and proactive security investigations to identify and mitigate emerging cyber threats.
• Operate vulnerability management processes, coordinate security assessments and drive remediation activities based on risk.
• Participate in security reviews of projects, systems and technology changes, providing practical recommendations and security guidance.
• Deliver security awareness initiatives, phishing simulations and targeted training activities to promote a positive security culture.
• Develop scripts, integrations and workflows to automate security processes and improve operational effectiveness.
• Support the delivery of security improvement initiatives, strategic projects and security roadmap activities.

The ideal candidate will have:

• Tertiary qualifications in a relevant technology discipline, with security certifications such as CISSP, Security+, MCSE Security or equivalent highly regarded.
• Demonstrated experience working within enterprise infrastructure and cloud environments, with a solid understanding of monitoring, logging and security operations.
• Strong understanding of information security principles, security controls, protocols and industry standards.
• Hands-on experience with security technologies such as SIEM, endpoint protection, vulnerability management, intrusion detection and related security platforms.
• Experience using PowerShell, Python, APIs, workflow automation or low-code/no-code tools to improve security operations and efficiency.
• Strong stakeholder engagement, communication and relationship-building skills, with the ability to translate technical risks into practical business guidance.
• Proven analytical and problem-solving skills, with the ability to identify issues, prioritise actions and deliver practical outcomes

During the recruitment process you may be required to complete pre-employment screening tests which include a criminal record check.

At GWF we strive to create a place where everyone belongs, everyone is valued, and everyone has equal opportunity. We encourage applications from people of all ages, nationalities, abilities, and cultures - including Aboriginal and Torres Strait Islander peoples, the LGBTQI+ community and people living with disability.

So we can get to know you in the best possible way, we're happy to adjust our recruitment process to support accessibility needs. Let us know your needs in providing a positive, barrier-free recruitment process.