Senior Cyber Security Engineer

Emmbr; Sydney; Hybrid; AUD 90,000 - 140,000; Full time

Job summary

Emmbr in Sydney is seeking a hands-on Security Engineer to become the key internal security resource across SecOps, Cloud/SaaS security and AppSec. You will report to IT & Security Leaders and collaborate with engineering teams to embed secure practices.

Responsibilities include managing incidents with an outsourced SOC, leading vulnerability management across corporate and cloud environments, and implementing controls for identity, data protection, and ISO 27001 readiness.

Qualifications

• Hands-on experience in Security Engineering or SecOps.
• Broad exposure to endpoint security, SIEM, vulnerability management, IAM, cloud/SaaS security.
• Comfortable investigating security issues themselves, not only at advisory level.
• Exposure to secure development or application security principles.

Responsibilities

• Act as the main internal security contact, coordinating with an outsourced SOC.
• Own day-to-day vulnerability management across corporate, cloud and SaaS environments.
• Work with engineering teams to strengthen secure development practices and AppSec.
• Review new SaaS platforms from a security perspective, especially with sensitive data.
• Help implement controls across identity, endpoints, data protection, cloud security and ISO 27001 readiness.

Skills

Security Eng

SecOps

Vuln Mgmt

IAM

Cloud Security

AppSec

SaaS Security

Incident Response

Endpoint Security

Tools

CrowdStrike

Sumo Logic

Proofpoint

Okta

Nullify

UpGuard

Job description

• Become the key hands-on security engineer in a leading HealthTech
• Broad scope across SecOps, Cloud/SaaS security and AppSec
• Sydney preferred, hybrid working in new office, competitive salary

This is a broad, hands-on security engineering role within a growing technology environment where you will become the key internal technical security resource. Reporting directly to IT & Security Leadership, you will work across operational security, vulnerability management, cloud and SaaS security, incident response and application security.

You will have genuine ownership while still having access to experienced internal and external specialists, making this a strong opportunity for someone looking to broaden their technical capability and influence how security develops across the business.

About the role

• Act as the main internal technical security contact, working with an outsourced SOC to investigate, contain and remediate security incidents.
• Own day-to-day vulnerability management across corporate, cloud and SaaS environments, helping teams prioritise and resolve security issues.
• Work across security tooling including CrowdStrike, Sumo Logic, Proofpoint, Okta, Nullify and UpGuard.
• Partner with software engineering and architecture teams to strengthen secure development practices and progressively uplift application security.
• Review new SaaS platforms, vendors and technical solutions from a security perspective, particularly where sensitive customer information is involved.
• Help implement technical controls across identity, endpoint security, data protection, cloud security and ISO 27001 readiness.

About you

• Hands-on experience within Security Engineering, Security Operations or a similarly technical cybersecurity role.
• Broad exposure across areas such as endpoint security, SIEM, vulnerability management, IAM, cloud security or SaaS security.
• Comfortable investigating security issues yourself rather than operating purely at an advisory or governance level.
• Exposure to a technology, SaaS or product environment and an understanding of secure development or application security principles.
• Able to work collaboratively with engineers and business stakeholders, translating security risk into practical actions.
• Pragmatic and solutions-focused, with a mindset of helping the business move forward securely rather than defaulting to saying no.

Why?

• Work across a genuinely broad security environment with meaningful technical ownership.
• Build further capability across AppSec, AI security, cloud security and ISO 27001 alongside experienced specialists.
• Join an inclusive, down-to-earth organisation using technology to make a difference in the healthcare sector

If you are a hands-on Security Engineer looking for broader ownership and the opportunity to grow across multiple areas of cyber, I'd be keen to hear from you.