Security Platform Engineer

XPT Software Australia Pty Ltd; Melbourne, Sydney; On-site; AUD 140,000 - 200,000; Full time

Job summary

XPT Software Australia Pty Ltd is seeking a hands-on Security Platform Engineer to deliver a new security product across client environments in Melbourne and Sydney. You will work with architects and SME teams to drive technical implementation, coordinate deployments and manage firewall requirements, with a focus on SSO, MFA and BAU readiness.

JD highlights include RunZero expertise, platform engineering, integrations with CMDB, ServiceNow, SIEM and other security tools, plus strong automation

Qualifications

• Hands-on cyber security platform engineering experience.
• Experience integrating security platforms with CMDB, SIEM and SOAR.
• Familiarity with asset discovery, classification and workflow automation.

Responsibilities

• Design and implement the runZero platform operating model across environments.
• Configure discovery coverage for corporate, data centre, cloud, OT and IoT environments.
• Define patterns for active/passive scanning and integration with security tools.
• Establish safe scanning standards, gates, maintenance windows and exception processes.
• Automate platform onboarding, configuration validation and asset tagging.
• Develop and maintain automation that reduces manual administration and improves response times.

Skills

Cyber security

Platform engineering

Automation

SRE

Tools

runZero

Armis

ServiceNow

CMDB

Tenable

EDR

NAC

DNS/DHCP

SIEM

SOAR

Job description

XPT Software Australia Pty Ltd | Contract

Security Platform Engineer

Melbourne, Sydney, Australia | Posted on 10/12/2026

• XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
  
• XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
  
• We have 120+technocrats in Australia working at our clientlocations.
  
• XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
  
• We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
  

Job Description

We arelooking for a hands on Cyber Security Platform Engineer to help deliver a newsecurity product across the Client environment.

Workingclosely with the architect and product/Vendor SME, the successful candidatewill drive the technical implementation, coordinate agent deployments, andmanage firewall requirements, and work with various technology and cyber teamsto implement controls such as SSO, MFA etc. This role requires someone who canwork effectively with stakeholders across Client, taking the product to BAU.

Please see given JD.

Note:JD mentions runZero product – will be great if candidate has runZeroexperience, if not we need the candidate to have experience with a comparableproduct, consider candidates with Armis experience

Platform engineering and configuration

• Design and implement the runZero platformoperating model, including environments, access, roles, boundaries, sites,asset groups, tags and naming standards.
  
• Configure discovery coverage for corporate, datacentre, cloud, remote access, network, IoT and relevant OT environments.
  
• Design appropriate active scanning, passivediscovery and integration patterns for different network zones andoperational risk profiles.
  
• Establish safe scanning standards, approvalgates, maintenance windows and exception processes for sensitive orfragile environments.
  
• Configure asset classification, ownership,business context, criticality and lifecycle attributes.
  
• Define standards for handling transient,ephemeral, duplicate, decommissioned and unmanaged assets.
  
• Develop reusable configuration patterns andtemplates that can be applied consistently across sites and environments.
  
• Maintain a clear separation between productionconfiguration, testing and experimental changes.
  

Integrations and data engineering

• Integrate runZero with CMDB, ServiceNow, Tenable,EDR, NAC, DNS/DHCP, cloud platforms, identity systems, SIEM, SOAR andrelevant infrastructure tools.
  
• Implement API-based ingestion and egress patternsusing secure service identities and least-privilege access.
  
• Automate asset reconciliation, deduplication,enrichment, ownership mapping and data-quality checks.
  
• Ensure downstream systems receive consistent,useful and appropriately scoped data rather than uncontrolled asset oralert noise.
  
• Define integration contracts, schemas, fieldmappings, ownership, error handling, retry behaviour and supportexpectations.
  
• Build mechanisms to detect integration drift, stalecredentials, failed synchronisation and unexpected data-volume changes.
  

Automation and workflow engineering

• Automate platform onboarding, configurationvalidation, scan scheduling, asset tagging, reporting and operationalhousekeeping.
  
• Automate the routing of actionable exposures tothe correct security, infrastructure, network, cloud or applicationowners.
  
• Implement event-driven workflows for newlydiscovered assets, exposed services, control gaps, unauthorised devicesand material changes.
  
• Design idempotent automation that can be safelyre-run without creating duplicate records, tickets or configuration drift.
  
• Use APIs, webhooks, scripts and workflowplatforms to reduce manual administration and improve response times.
  
• Introduce approval controls for high-impact orpotentially disruptive actions.
  
• Create automated lifecycle handling for assetsthat are retired, renamed, moved, rebuilt or short-lived.
  

SRE and operations

• Treat runZero configuration and operationalprocesses as code wherever possible.
  
• Establish version control, peer review, automatedtesting, release controls and rollback procedures for platform changes.
  
• Define service-level indicators and objectivesfor discovery coverage, data freshness, integration health, scan success,alert delivery and remediation workflow reliability.
  
• Implement dashboards and alerts that detectplatform degradation before it affects consumers.
  
• Create operational runbooks for common failures,including collector or explorer issues, scan failures, integration errors,data-quality problems and access failures.
  
• Design backup, recovery, disaster-recovery andbusiness-continuity procedures appropriate to the service.
  
• Conduct capacity, performance and scaleassessments as coverage expands across Client environments.
  
• Manage credentials through approved enterprisesecrets-management capabilities; do not embed secrets in scripts,repositories or configuration files.
  
• Implement role-based access control,privileged-access controls, administrative separation and auditable changehistory.
  
• Support security reviews, architecture reviews,privacy assessments, risk assessments and control assurance activities.
  
• Ensure platform data handling, logging,retention, residency and third-party access align with Optus security andregulatory requirements.