Security Engineer, Operations: Threat Detection & Automation

George Weston Foods; Sydney; On-site; AUD 140,000 - 180,000; Full time

Job summary

George Weston Foods is seeking a Security Engineer - Operations in Sydney to own day-to-day cyber security operations across on‑premises and cloud environments. You will monitor, respond to alerts and drive risk‑based remediation while partnering with IT and business stakeholders.

The ideal candidate brings enterprise security experience, proven ability to translate technical risk into practical guidance, and hands-on skills with SIEM, Defender, Entra ID and automation tooling.

Qualifications

• Tertiary qualification in a technology discipline with recognised security certs preferred.
• Experience in enterprise infrastructure and cloud security operations.
• Strong knowledge of monitoring, logging and security controls.
• Hands-on with SIEM, endpoint protection and vulnerability management.

Responsibilities

• Investigate security alerts and incidents, coordinating containment, eradication and recovery.
• Administer and optimise security technologies including SIEM, Defender and Entra ID security controls.
• Conduct threat hunting and proactive investigations to mitigate emerging threats.
• Operate vulnerability management and drive remediation based on risk.
• Participate in security reviews and provide practical guidance to projects.
• Deliver security awareness initiatives and phishing simulations.
• Develop scripts and workflows to automate security processes.
• Support security improvement initiatives and roadmap activities.

Skills

Stakeholder engagement

Communication

Analytical thinking

Problem solving

Security governance

Threat detection

Security awareness advocate

Education

Bachelor degree or higher in a relevant field

Security certifications (CISSP, Security+, MCSE Security)

Tools

PowerShell

Python

APIs

Low-code/no-code tools

SIEM

Microsoft Defender

Zscaler

Job description

George Weston Foods is seeking a Security Engineer - Operations in Sydney to own day-to-day cyber security operations across on‑premises and cloud environments. You will monitor, respond to alerts and drive risk‑based remediation while partnering with IT and business stakeholders.

The ideal candidate brings enterprise security experience, proven ability to translate technical risk into practical guidance, and hands-on skills with SIEM, Defender, Entra ID and automation tooling.