Senior Cyber Security Engineer - Contract - Melbourne, Adelaide

Hastha Solutions Pty Ltd; Melbourne; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

Hastha Solutions Pty Ltd in Melbourne is seeking a Senior Cyber Security Engineer on a 6‑month contract to join our cyber engineering team. You will deliver security controls across IT/OT, drive AESCSF maturity, and support incident response across distributed industrial environments.

You will collaborate with Operations, IT and Engineering, translating regulatory requirements into practical engineering actions and providing expert guidance on complex security challenges.

Qualifications

• Bachelor’s degree in cyber security, IT, engineering or related field.
• Industry certification (e.g., CISSP or equivalent).
• Minimum 6+ years’ experience in cyber security engineering roles across IT and/or OT environments.
• Experience with AESCSF, ISA/IEC 62443, ASD Essential 8 or NIST frameworks.
• Hands‑on experience in OT/ICS environments (SCADA, DCS, PLCs).
• Experience delivering security outcomes across distributed industrial sites or critical infrastructure.

Responsibilities

• Deliver cyber engineering services that protect business operations and align with risk appetite and regulatory obligations.
• Partner with Operations, IT, Networks, Projects, and Engineering to ensure practical controls.
• Translate regulatory requirements into actionable engineering activities.
• Provide expert advice on complex security issues including OT/IT convergence and safety‑critical environments.
• Oversee secure engineering outcomes for projects, maintenance, and upgrades.
• Participate in CSIRT as an Incident Handler and support IR activities.

Skills

Strong communication

Analytical skills

Stakeholder engagement

Risk assessment

Security incident response

Education

Bachelor’s degree in cyber security, IT, engineering or related field

Tools

SASE

Firewalls

IAM

Automation/orchestration tools

DLP

Job description

Senior Cyber Security Engineer - Contract - Melbourne, Adelaide

Melbourne, Australia | Posted on 11/04/2026

Urgentrequirement of Senior Cyber Security Engineer - Contract - Melbourne, Adelaide

Requirements

Business Enablement

• Deliver cyber engineering services that protect business operations and align with risk appetite, safety requirements, and regulatory obligations.
• Partner with Operations, IT, Networks, Projects, and Engineering to ensure controls are practical, sustainable, and enable reliable system performance.
• Translate regulatory, CI Act, and AESCSF requirements into actionable engineering activities.
• Provide expert, influential advice on complex security issues, including OT/IT convergence, vendor access, remote support, and safety-critical industrial environments.

Cyber Security Engineering

• Design, implement, and support security controls across IT, OT, AI and IoT systems.
• Deploy and manage technologies such as firewalls, SASE/SSE, EDR/XDR, SIEM/SOAR, IAM, encryption, and industrial security platforms.
• Implement secure network segmentation across OT environments, including DMZs, Zone/Conduit models, and vendor remote access models.
• Embed DevSecOps practices into CI/CD pipelines, including SCA, SAST/DAST, secrets management, and build pipeline hardening.
• Use automation (IaC, policy-as-code, configuration compliance tools) to maintain secure baselines.
• Oversee delivery of secure engineering outcomes for projects, maintenance activities, and system upgrades.
• Perform risk assessments, threat modelling, vulnerability analysis, and configuration compliance reviews.
• Support uplift of AESCSF maturity and compliance with ISA/IEC 62443, NIST CSF, ASD Essential 8, and CI Act obligations.
• Identify control gaps and work with Technology and Engineering teams to implement mitigations.
• Maintain documentation, standards, patterns, and OT system security baselines.
• Participate in the Cyber Security Incident Response Team (CSIRT) as an Incident Handler.
• Support IR activities across IT and OT environments, including containment, forensics and recovery.
• Maintain IR playbooks and contribute to tabletop and purple-team exercises.
• Provide out-of-hours support for critical cyber or operational incidents.
• Integrate internal and external threat intelligence into engineering, monitoring, and IR processes.
• Track OT/ICS threat trends (e.g., ransomware targeting manufacturing, ICS-specific malware).
• Use TI insights to shape architecture decisions, vulnerability management and control prioritisation.
• Contribute to development of cyber security architecture patterns for IT, OT, IoT, and Cloud.
• Support design reviews and key design decision processes.
• Ensure engineering solutions align with enterprise architecture and secure-by-design principles.
• Identify automation opportunities and improve efficiency of control implementation, monitoring and incident response.
• Stay current with evolving threats, emerging technologies, and best practices in ICn and enterprise cyber security.
• Drive uplift of cyber engineering processes, runbooks, standards, and asset security practices.
• Contribute to the Cyber Safety Program and broader security uplift initiatives.
• Bachelor’s degree in cyber security, IT, engineering or related field.
• Industry certification (e.g., CISSP or equivalent).
• Minimum 6+ years’ experience in cyber security engineering roles across IT and/or OT environments.
• Demonstrated experience with AESCSF, ISA/IEC 62443, ASD Essential 8 or NIST frameworks.
• Hands‑on experience working within OT/ICS environments (SCADA, DCS, PLCs, industrial networks, safety systems).
• Experience delivering security outcomes across distributed industrial sites or critical infrastructure.

Technical Skills

• Excellent knowledge of cyber security principles, management frameworks, and practices, particularly relating to OT.
• Experience with application whitelisting, SASE, firewalls, proxy, email filtering, anti-malware, DLP, cloud platforms, and other security technologies.
• Familiarity with DevSecOps, automation, and orchestration tools.
• Familiarity and experience with Data protection and classification
• Experience with vulnerability management/scanning, web application security, API security, Zero Trust, PAM, NDR, UEBA, and network-based encryption.
• Proficiency with Microsoft (Azure, O365), Linux (Red Hat), and mobile platforms (iPhone & Android).

Soft Skills

• Strong communication and stakeholder engagement skills.
• Excellent analytical and organizational skills.
• Ability to identify, assess, and communicate cyber security risks.

Leadership

• Experience providing thought leadership or mentoring within a cyber security context

Duration: 06 Monthsandpossible extension

Eligibility: Australian/NZCitizens/PR Holders only