Security Platform Engineer with runZero - Sydney

Ayan Infotech; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

AYAN InfoTech in Sydney is seeking a hands-on Security Platform Engineer to deliver a new security product across the Client environment, with a focus on runZero integration and secure configurations.

You will collaborate with architects, vendors and cyber teams to deploy agents, manage firewall requirements, and implement controls such as SSO and MFA, taking the product to BAU for ongoing operations.

Qualifications

• Hands-on cyber security platform engineering experience is required.
• Experience with runZero or a comparable asset discovery product is preferred.
• Ability to work with architects, vendors and cyber teams to implement controls.

Responsibilities

• Platform engineering and configuration
• Design and implement the runZero platform operating model, including environments, access, roles, boundaries, sites, asset groups, tags and naming standards
• Configure discovery coverage for corporate, data centre, cloud, remote access, network, IoT and relevant OT environments
• Design active and passive discovery patterns for different network zones and risk profiles
• Establish scanning standards, approval gates, maintenance windows and exception processes
• Configure asset classification, ownership, business context, criticality and lifecycle attributes
• Define standards for handling transient, unmanaged and decommissioned assets
• Develop reusable configuration patterns across sites and environments
• Maintain separation between production, testing and experimental changes
• Integrations and data engineering
• Integrate runZero with CMDB, ServiceNow, Tenable, EDR, NAC, DNS/DHCP, cloud platforms, identity systems, SIEM, SOAR
• Implement API-based ingestion and egress with least privilege access
• Automate asset reconciliation, deduplication, enrichment and ownership mapping
• Ensure downstream systems receive useful, well-scoped data
• Define integration contracts, schemas, mappings and error handling
• Detect integration drift, stale credentials and data-volume changes
• Automation and workflow engineering
• Automate onboarding, configuration validation, scan scheduling and asset tagging
• Automate routing of exposures to owners across security, infra, network and cloud
• Implement event-driven workflows for new assets, exposed services and changes
• Design idempotent automation to avoid duplicates and drift
• Use APIs, webhooks and scripts to reduce manual admin and improve response times
• Introduce approval controls for high-impact actions
• Lifecycle handling for retired, renamed or moved assets

Job description

AYAN InfoTech is looking for Security Platform Engineer with runZero to join an exciting project based in Sydney. The role offers you the opportunity to contribute towards an extremely well structured and mature environment, working on sophisticated enhancement projects.
Role: Security Platform Engineer with runZero
Location: Sydney
Contract Duration: 6 Months with high possible extensions
Experience: 7+ Years
Job Summary:

We are looking for a hands-on Cyber Security Platform Engineer to help deliver a new security product across the Client environment.
Working closely with the architect and product/Vendor SME, the successful candidate will drive the technical implementation, coordinate agent deployments, and manage firewall requirements, and work with various technology and cyber teams to implement controls such as SSO, MFA etc. This role requires someone who can work effectively with stakeholders across Client, taking the product to BAU.
Note: runZero product - will be great if candidate has runZero experience, if not we need the candidate to have experience with a comparable product.

Job description:

• Platform engineering and configuration
• Design and implement the runZero platform operating model, including environments, access, roles, boundaries, sites, asset groups, tags and naming standards.
• Configure discovery coverage for corporate, data centre, cloud, remote access, network, IoT and relevant OT environments.
• Design appropriate active scanning, passive discovery and integration patterns for different network zones and operational risk profiles.
• Establish safe scanning standards, approval gates, maintenance windows and exception processes for sensitive or fragile environments.
• Configure asset classification, ownership, business context, criticality and lifecycle attributes.
• Define standards for handling transient, epithelial, duplicate, decommissioned and unmanaged assets.
• Develop reusable configuration patterns and templates that can be applied consistently across sites and environments.
• Maintain a clear separation between production configuration, testing and experimental changes.
• Integrations and data engineering
• Integrate runZero with CMDB, ServiceNow, Tenable, EDR, NAC, DNS/DHCP, cloud platforms, identity systems, SIEM, SOAR and relevant infrastructure tools.
• Implement API-based ingestion and egress patterns using secure service identities and least-privilege access.
• Automate asset reconciliation, deduplication, enrichment, ownership mapping and data-quality checks.
• Ensure downstream systems receive consistent, useful and appropriately scoped data rather than uncontrolled asset or alert noise.
• Define integration contracts, schemas, field mappings, ownership, error handling, retry behaviour and support expectations.
• Build mechanisms to detect integration drift, stale credentials, failed synchronisation and unexpected data-volume changes.
• Automation and workflow engineering
• Automate platform onboarding, configuration validation, scan scheduling, asset tagging, reporting and operational housekeeping.
• Automate the routing of actionable exposures to the correct security, infrastructure, network, cloud or application owners.
• Implement event-driven workflows for newly discovered assets, exposed services, control gaps, unauthorised devices and material changes.
• Design idempotent automation that can be safely re-run without creating duplicate records, tickets or configuration drift.
• Use APIs, webhooks, scripts and workflow platforms to reduce manual administration and improve response times.
• Introduce approval controls for high-impact or potentially disruptive actions.
• Create automated lifecycle handling for assets that are retired, renamed, moved, rebuilt or short-lived.

Contact: 61-[phone] for more details.

Please note we will be able to contact only shortlisted candidates for this role. We thank you in advance for your interest.