Senior Cyber Security Engineer - Contract - Melbourne, Adelaide

Hastha Solutions Pty Ltd; Melbourne; On-site; AUD 120,000 - 160,000; Part time

Job summary

Hastha Solutions Pty Ltd in Melbourne is seeking a Senior Cyber Security Engineer for a 6‑month contract to protect critical assets across IT and OT environments. The role emphasizes regulatory alignment, threat handling, and secure-by-design practices.

You will design and implement security controls, collaborate with Operations, IT, and Engineering, and participate in incident response and tabletop exercises. Australian/NZ eligibility applies.

Qualifications

• 6+ years of cyber security engineering experience in IT and/or OT.
• Experience with AESCSF, ISA/IEC 62443, ASD Essential 8 or NIST frameworks.
• Hands-on OT/ICS environment experience (SCADA, DCS, PLCs).
• Ability to translate regulatory requirements into engineering activities.

Responsibilities

• Design, implement, and support security controls across IT, OT, AI and IoT.
• Embed DevSecOps practices into CI/CD pipelines.
• Lead risk assessments and threat modelling.
• Support IR activities and incident response in IT/OT.

Skills

Cyber security principles

OT security

Risk assessment

Threat modelling

Incident response

Stakeholder engagement

Education

Bachelor's degree in cyber security, IT, engineering or related field

CISSP or equivalent certification

Tools

SASE/SSE

EDR/XDR

SIEM/SOAR

IAM

Encryption

Azure

Red Hat Linux

Job description

Senior Cyber Security Engineer - Contract - Melbourne, Adelaide

Melbourne, Australia | Posted on 11/04/2026

Urgentrequirement of Senior Cyber Security Engineer - Contract - Melbourne, Adelaide

Requirements

Business Enablement

• Deliver cyber engineering services that protect business operations and align with risk appetite, safety requirements, and regulatory obligations.
• Partner with Operations, IT, Networks, Projects, and Engineering to ensure controls are practical, sustainable, and enable reliable system performance.
• Translate regulatory, CI Act, and AESCSF requirements into actionable engineering activities.
• Provide expert, influential advice on complex security issues, including OT/IT convergence, vendor access, remote support, and safety-critical industrial environments.

Cyber Security Engineering

• Design, implement, and support security controls across IT, OT, AI and IoT systems.
• Deploy and manage technologies such as firewalls, SASE/SSE, EDR/XDR, SIEM/SOAR, IAM, encryption, and industrial security platforms.
• Implement secure network segmentation across OT environments, including DMZs, Zone/Conduit models, and vendor remote access models.
• Embed DevSecOps practices into CI/CD pipelines, including SCA, SAST/DAST, secrets management, and build pipeline hardening.
• Use automation (IaC, policy-as-code, configuration compliance tools) to maintain secure baselines.
• Oversee delivery of secure engineering outcomes for projects, maintenance activities, and system upgrades.
• Perform risk assessments, threat modelling, vulnerability analysis, and configuration compliance reviews.
• Support uplift of AESCSF maturity and compliance with ISA/IEC 62443, NIST CSF, ASD Essential 8, and CI Act obligations.
• Identify control gaps and work with Technology and Engineering teams to implement mitigations.
• Maintain documentation, standards, patterns, and OT system security baselines.
• Participate in the Cyber Security Incident Response Team (CSIRT) as an Incident Handler.
• Support IR activities across IT and OT environments, including containment, forensics and recovery.
• Maintain IR playbooks and contribute to tabletop and purple-team exercises.
• Provide out-of-hours support for critical cyber or operational incidents.
• Integrate internal and external threat intelligence into engineering, monitoring, and IR processes.
• Track OT/ICS threat trends (e.g., ransomware targeting manufacturing, ICn-specific malware).
• Use TI insights to shape architecture decisions, vulnerability management and control prioritisation.
• Contribute to development of cyber security architecture patterns for IT, OT, IoT and Cloud.
• Support design reviews and key design decision processes.
• Ensure engineering solutions align with enterprise architecture and secure-by-design principles.
• Identify automation opportunities and improve efficiency of control implementation, monitoring and incident response.
• Stay current with evolving threats, emerging technologies and best practices in ICn and enterprise cyber security.
• Drive uplift of cyber engineering processes, runbooks, standards and asset security practices.
• Contribute to the Cyber Safety Program and broader security uplift initiatives.
• Bachelor’s degree in cyber security, IT, engineering or related field.
• Industry certification (e.g., CISSP or equivalent).
• Minimum 6+ years’ experience in cyber security engineering roles across IT and/or OT environments.
• Demonstrated experience with AESCSF, ISA/IEC 62443, ASD Essential 8 or NIST frameworks.
• Hands‑on experience working within OT/ICS environments (SCADA, DCS, PLCs, industrial networks, safety systems).
• Experience delivering security outcomes across distributed industrial sites or critical infrastructure.

Technical Skills

• Excellent knowledge of cyber security principles, management frameworks, and practices, particularly relating to OT.
• Experience with application whitelisting, SASE, firewalls, proxy, email filtering, anti-malware, DLP, cloud platforms, and other security technologies.
• Familiarity with DevSecOps, automation, and orchestration tools.
• Familiarity and experience with Data protection and classification
• Experience with vulnerability management/scanning, web application security, API security, Zero Trust, PAM, NDR, UEBA, and network-based encryption.
• Proficiency with Microsoft (Azure, O365), Linux (Red Hat), and mobile platforms (iPhone & Android).

Soft Skills

• Strong communication and stakeholder engagement skills.
• Excellent analytical and organizational skills.
• Ability to identify, assess, and communicate cyber security risks.

Leadership

• Experience providing thought leadership or mentoring within a cyber security context

Duration: 06 Monthsandpossible extension

Eligibility: Australian/NZCitizens/PR Holders only