Senior Cyber Security Engineer

Emmbr; Sydney; Hybrid; AUD 120,000 - 190,000; Full time

Job summary

Emmbr in Sydney is seeking a hands-on Security Engineer to serve as the key internal security resource. You will engage across SecOps, vulnerability management, cloud/SaaS security and AppSec, reporting to IT & Security Leadership and collaborating with engineering teams.

You will own incident response coordination with an outsourced SOC, manage vulnerabilities, and drive secure development practices across platforms, ensuring robust security controls and risk-based decisions.

Qualifications

• Hands-on security engineer with breadth across SecOps, Cloud/SaaS, and AppSec.
• Comfortable investigating security issues hands-on, not only advising.
• Experience in security tooling and incident response.
• Understanding secure development practices and application security.
• Ability to translate risk into actionable controls and work with engineers.

Responsibilities

• Act as the main internal technical security contact with outsourced SOC activities.
• Own day-to-day vulnerability management across corporate, cloud, and SaaS environments.
• Work with security tooling like CrowdStrike, Sumo Logic, Proofpoint, Okta, Nullify and UpGuard.
• Collaborate with software engineering to uplift secure development and AppSec.
• Review new SaaS platforms and vendors from a security perspective.
• Help implement controls across identity, endpoint security, data protection, and cloud security.

Skills

Hands-on security

Broad security exposure

Investigation skills

Secure development knowledge

Stakeholder collaboration

Pragmatic solutions

Tools

CrowdStrike

Sumo Logic

Proofpoint

Okta

Nullify

UpGuard

Job description

• Become the key hands-on security engineer in a leading HealthTech
• Broad scope across SecOps, Cloud/SaaS security and AppSec
• Sydney preferred, hybrid working in new office, competitive salary

This is a broad, hands-on security engineering role within a growing technology environment where you will become the key internal technical security resource. Reporting directly to IT & Security Leadership, you will work across operational security, vulnerability management, cloud and SaaS security, incident response and application security. You will have genuine ownership while still having access to experienced internal and external specialists, making this a strong opportunity for someone looking to broaden their technical capability and influence how security develops across the business.

About the role

• Act as the main internal technical security contact, working with an outsourced SOC to investigate, contain and remediate security incidents.
• Own day-to-day vulnerability management across corporate, cloud and SaaS environments, helping teams prioritise and resolve security issues.
• Work across security tooling including CrowdStrike, Sumo Logic, Proofpoint, Okta, Nullify and UpGuard.
• Partner with software engineering and architecture teams to strengthen secure development practices and progressively uplift application security.
• Review new SaaS platforms, vendors and technical solutions from a security perspective, particularly where sensitive customer information is involved.
• Help implement technical controls across identity, endpoint security, data protection, cloud security and ISO 2701 readiness.

About you

• Hands-on experience within Security Engineering, Security Operations or a similarly technical cybersecurity role.
• Broad exposure across areas such as endpoint security, SIEM, vulnerability management, IAM, cloud security or SaaS security.
• Comfortable investigating security issues yourself rather than operating purely at an advisory or governance level.
• Exposure to a technology, SaaS or product environment and an understanding of secure development or application security principles.
• Able to work collaboratively with engineers and business stakeholders, translating security risk into practical actions.
• Pragmatic and solutions-focused, with a mindset of helping the business move forward securely rather than defaulting to saying no.

Why?

• Work across a genuinely broad security environment with meaningful technical ownership.
• Build further capability across AppSec, AI security, cloud security and ISO 2701 alongside experienced specialists.
• Join an inclusive, down-to-earth organisation using technology to make a difference in the healthcare sector

If you are a hands-on Security Engineer looking for broader ownership and the opportunity to grow across multiple areas of cyber, I'd be keen to hear from you.