Senior Cyber Security Engineer

Cromarty; City of Melbourne; On-site; AUD 140,000 - 190,000; Full time

Job summary

Cromarty Automation is seeking a Senior Cyber Security Engineer to deliver consulting engagements across solar, wind, utilities and manufacturing environments. This hands-on role focuses on regulatory compliance, OT cyber security, and practical engineering controls for energy assets operating under SOCI and AEMO frameworks.

You will lead reviews, gap assessments, and improvements, working directly with asset owners, operators, and senior stakeholders, producing clear reports and conducting

Qualifications

• 7+ years’ experience in cyber security, OT security, or engineering.
• Proven experience in energy, utilities, or critical infrastructure.
• Hands-on skills with OS hardening, firewall configuration, and OT risk assessments.
• Ability to engage engineers, operators, and executives.

Responsibilities

• Review CIRMPs and supporting systems against SOCI obligations, AEMO requirements, and IEC 62443.
• Assess OT and plant environments including SCADA, historians, and networks.
• Manage OS hardening, patching, and configuration in OT contexts.
• Design firewall architectures and network segmentation aligned to Purdue/IEC 62443.
• Deliver clear reports and conduct client workshops for leadership and operators.

Skills

Cyber security

OT security

Engineering

Regulatory compliance

Job description

Cromarty Automation is a trusted provider of Cyber Security, Industrial Automation, Electrical Engineering, and Renewable Energy solutions, with operations across Australia

For over 30 years, we’ve supported clients across industries including water, resources, manufacturing and infrastructure—delivering reliable, high-quality solutions that improve operational performance and asset reliability

Cromarty is seeking a Senior Cyber Security Engineer to deliver consulting engagements across solar, wind, utilities and manufacturing environments. This role focuses on regulatory compliance, OT cyber security, and practical engineering controls for energy assets operating under the SOCIand AEMO frameworks.

You will lead reviews, gap assessments, and improvement programs that span compliance management,OT security, and cloud data retention, working directly with asset owners, operators, and senior stakeholders.

This is a hands‑on role — not a policy‑only or SOC position.

What You’ll Do

ReviewCritical Infrastructure Risk Management Plans (CIRMPs), and supporting systems against:

SOCI obligations

AEMO Registered Participant requirements

AEMO Cyber Security Framework

IEC62443 OT Cyber Security Framework

Assess OT and plant environments, including:

SCADA, historians, PQM systems, and plant networks

Operating system baselining and hardening (Windows/Linux)

Patch, vulnerability, and configuration management in OT contexts

Review and design:

Firewall architectures and rule sets (IT/OT boundary, zones & conduits)

Network segmentation aligned to Purdue / IEC 62443

Secure remote and vendor access

Assess logging, monitoring, and incident readiness for cyber and compliance events

Perform structuredgap analysesand develop practical, prioritised recommendations

Produce clear written reports and deliver client workshops (executive and operational)

What We’re Looking For

7+ years’ experience in cyber security, OT security, or engineering

Proven experience in energy, utilities, or critical infrastructure

Strong hands‑on skills with:

OS hardening and security baselines

Firewall configuration and network security

OT risk assessments and remediation planning

Ability to engage credibly with engineers, operators, and executives

Consulting or advisory experience strongly preferred

Mandatory Certifications

Applicants must hold at least oneof the following:

GICSP

GRID

ISA/IEC 62443 Cybersecurity Specialist or Expert

CISSP(with demonstrable OT/energy experience)

Why Cromarty

Work on real energy assets, not theoretical cyber problems

High‑impact work with regulatory and operational significance

Trusted senior role with autonomy and influence

Competitive remuneration