Senior Cyber Security Engineer

Emmbr; Melbourne; Híbrido; AUD 120.000 - 180.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work

Competitive salary

Descripción de la vacante

Emmbr is seeking a hands-on Security Engineer to lead internal security initiatives across SecOps, cloud, SaaS, and AppSec. You’ll own vulnerability management, coordinate with an outsourced SOC, and help shape secure development practices while partnering with engineering teams.

The role offers hybrid work in a modern Melbourne office with a focus on practical risk-based security improvements across identity, endpoint protection and data security.

Formación

• Hands-on security engineering experience across SecOps, Cloud/SaaS, and AppSec.
• Broad exposure to endpoint security, SIEM, IAM, cloud and SaaS security.
• Comfortable investigating security issues directly rather than only advising.
• Exposure to secure development or application security principles.
• Ability to translate security risk into practical actions for engineers and stakeholders.

Responsabilidades

• Act as the main internal security contact, coordinating with an outsourced SOC to investigate, contain and remediate incidents.
• Own day-to-day vulnerability management across corporate, cloud and SaaS environments.
• Work with security tooling such as CrowdStrike, Sumo Logic, Proofpoint, Okta, Nullify and UpGuard.
• Collaborate with software engineering and architecture teams to uplift secure development and AppSec.
• Review new SaaS platforms and vendors from a security perspective.
• Help implement controls across identity, endpoint security, data protection and cloud security; support ISO 27001 readiness.

Conocimientos

Security engineering

Incident response

Vulnerability management

Cloud security

SaaS security

AppSec

IAM

Endpoint security

SIEM

Security tooling

Herramientas

CrowdStrike

Sumo Logic

Proofpoint

Okta

Nullify

UpGuard

Descripción del empleo

• Become the key hands-on security engineer in a leading HealthTech
• Broad scope across SecOps, Cloud/SaaS security and AppSec
• Hybrid working in new office, competitive salary

This is a broad, hands-on security engineering role within a growing technology environment where you will become the key internal technical security resource. Reporting directly to IT & Security Leadership, you will work across operational security, vulnerability management, cloud and SaaS security, incident response and application security. You will have genuine ownership while still having access to experienced internal and external specialists, making this a strong opportunity for someone looking to broaden their technical capability and influence how security develops across the business.

About the role

• Act as the main internal technical security contact, working with an outsourced SOC to investigate, contain and remediate security incidents.
• Own day-to-day vulnerability management across corporate, cloud and SaaS environments, helping teams prioritise and resolve security issues.
• Work across security tooling including CrowdStrike, Sumo Logic, Proofpoint, Okta, Nullify and UpGuard.
• Partner with software engineering and architecture teams to strengthen secure development practices and progressively uplift application security.
• Review new SaaS platforms, vendors and technical solutions from a security perspective, particularly where sensitive customer information is involved.
• Help implement technical controls across identity, endpoint security, data protection, cloud security and ISO 27001 readiness.

About you

• Hands-on experience within Security Engineering, Security Operations or a similarly technical cybersecurity role.
• Broad exposure across areas such as endpoint security, SIEM, vulnerability management, IAM, cloud security or SaaS security.
• Comfortable investigating security issues yourself rather than operating purely at an advisory or governance level.
• Exposure to a technology, SaaS or product environment and an understanding of secure development or application security principles.
• Able to work collaboratively with engineers and business stakeholders, translating security risk into practical actions.
• Pragmatic and solutions-focused, with a mindset of helping the business move forward securely rather than defaulting to saying no.

Why?

• Work across a genuinely broad security environment with meaningful technical ownership.
• Build further capability across AppSec, AI security, cloud security and ISO 27001 alongside experienced specialists.
• Join an inclusive, down-to-earth organisation using technology to make a difference in the healthcare sector