Senior Cyber Security Engineer

Emmbr; Sydney; Hybrid; AUD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Emmbr in Australia is seeking a hands-on security engineer to become the key internal technical security resource, reporting to IT & Security Leadership, working across operational security, vulnerability management, cloud and SaaS security, incident response and application security.

The role offers genuine ownership, opportunities to work with internal and external specialists, and growth across AppSec and ISO readiness in a healthcare tech environment.

Qualifications

• Hands-on security engineering experience across SecOps and app security.
• Experience in vulnerability management, incident response and cloud security.
• Familiarity with SaaS security and secure development practices.

Responsibilities

• Act as the main internal security engineering contact supporting SOC coordination.
• Own day-to-day vulnerability management across corporate, cloud and SaaS environments.
• Collaborate with software engineering and architecture to uplift AppSec.
• Review security controls across identity, endpoint protection and data protection.
• Contribute to ISO 27001 readiness and security policy implementation.
• Investigate and respond to security incidents with a pragmatic, business-focused approach.

Skills

Security engineering

Security operations

Vulnerability management

Incident response

AppSec

Cloud security

IAM

SIEM

Endpoint security

Tools

CrowdStrike

Sumo Logic

Proofpoint

Okta

Nullify

UpGuard

Job description

• Become the key hands-on security engineer in a leading HealthTech
• Broad scope across SecOps, Cloud/SaaS security and AppSec
• Sydney preferred, hybrid working in new office, competitive salary

This is a broad, hands-on security engineering role within a growing technology environment where you will become the key internal technical security resource. Reporting directly to IT & Security Leadership, you will work across operational security, vulnerability management, cloud and SaaS security, incident response and application security.

You will have genuine ownership while still having access to experienced internal and external specialists, making this a strong opportunity for someone looking to broaden their technical capability and influence how security develops across the business.

About the role

• Act as the main internal technical security contact, working with an outsourced SOC to investigate, contain and remediate security incidents.
• Own day-to-day vulnerability management across corporate, cloud and SaaS environments, helping teams prioritise and resolve security issues.
• Work across security tooling including CrowdStrike, Sumo Logic, Proofpoint, Okta, Nullify and UpGuard.
• Partner with software engineering and architecture teams to strengthen secure development practices and progressively uplift application security.
• Review new SaaS platforms, vendors and technical solutions from a security perspective, particularly where sensitive customer information is involved.
• Help implement technical controls across identity, endpoint security, data protection, cloud security and ISO 27001 readiness.

About you

• Hands-on experience within Security Engineering, Security Operations or a similarly technical cybersecurity role.
• Broad exposure across areas such as endpoint security, SIEM, vulnerability management, IAM, cloud security or SaaS security.
• Comfortable investigating security issues yourself rather than operating purely at an advisory or governance level.
• Exposure to a technology, SaaS or product environment and an understanding of secure development or application security principles.
• Able to work collaboratively with engineers and business stakeholders, translating security risk into practical actions.
• Pragmatic and solutions-focused, with a mindset of helping the business move forward securely rather than defaulting to saying no.

Why?

• Work across a genuinely broad security environment with meaningful technical ownership.
• Build further capability across AppSec, AI security, cloud security and ISO 27001 alongside experienced specialists.
• Join an inclusive, down-to-earth organisation using technology to make a difference in the healthcare sector