Senior Security Engineer

Austroads; Sydney; Hybrid; AUD 140,000 - 210,000; Full time

Benefits offered by this job

Flexible working arrangements

Hybrid work (home + office)

Extra 5 days personal leave

Wellbeing allowance of $500

Additional paid parental leave

EAP access for employees and immediate

Job summary

Austroads is seeking a Senior Security Engineer to strengthen its security posture by implementing cloud-native and third-party security solutions, supporting operational teams, and ensuring controls are effective and scalable across Australia.

The role focuses on design, implementation, and management of security controls in Azure and AWS, alignment with CIS/ISO 27001 and Essential Eight, and collaboration with cybersecurity and IT teams to drive secure deployments and incident response.

Qualifications

• Significant cybersecurity engineering experience with hands-on Azure and AWS
• Strong understanding of cloud-native security controls and IAM
• Familiarity with ISO 27001, NIST, CIS and ACSC Essential Eight

Responsibilities

• Design, implement, and manage security controls in Azure and AWS
• Deploy and maintain security tools (XDR, CSPM, vulnerability scanners)
• Implement endpoint, network, and identity security controls
• Integrate tools with existing infra and ensure alerting and logging
• Support incident response, risk assessments, and compliance initiatives

Skills

Azure

AWS

Security engineering

Cloud security

Tools

XDR

CSPM

Zero Trust

Vulnerability scanners

Job description

The Opportunity

Austroads is seeking a Senior Security Engineer to play a key role in strengthening Austroads security posture by implementing cloud-native and third-party security solutions, supporting operational teams, and ensuring that technical controls are effective, scalable, and aligned with business and compliance requirements.

Responsibilities

This role is responsible for the following:

Cloud Security Engineering

• Designing, implementing, and managing security controls in Azure and AWS environments, such as IAM, network security, logging, and monitoring.
• Ensuring cloud configurations align with best practices and compliance frameworks (e.g. CIS, Essential Eight, ISO 27001).
• Supporting application and infrastructure teams with secure architecture and deployment guidance.

Security Controls Implementation and Support

• Deploying and maintaining technical security tools such as XDR, Zero Trust, vulnerability scanners, and cloud security posture management (CSPM) platforms.
• Implementing and maintaining endpoint, network, and identity security controls across the organisation.
• Integrating security tools and controls with existing infrastructure and ensure effective alerting, logging, and reporting.
• Troubleshooting and resolving issues related to security tooling and configurations.
• Conducting configuration reviews and hardening of systems, applications, and cloud services.
• Supporting technical assurance activities including penetration testing and remediation tracking.

Operational Support

• Collaborating with security operations, risk and compliance teams to support incident response, forensic investigations, risk assessments, and compliance initiatives.
• Provide technical expertise and backfill support during peak operational periods or resource gaps.
• Identifying opportunities to enhance security tooling, automation, and control effectiveness.
• Staying current with emerging threats, technologies, and best practices in cloud and enterprise security.
• Supporting the automation of security processes.

Supporting the Information Security Team

• Collaborating with technology and business teams to achieve information security outcomes.
• Contributing to continuous improvement, identifying ways to enhance value for our members and the public
• Maintaining Quality Systems processes and procedures associated with the function
• Other duties as directed

The full position description can be found at www.austroads.gov.au/careers.

About You

• Significant experience in cybersecurity engineering, with strong hands-on experience in Azure and AWS.
• Proven experience implementing and managing security tools and platforms.
• Strong understanding of cloud-native security controls, identity and access management, and infrastructure hardening.
• Familiarity with security frameworks such as ISO 27001, NIST, CIS and ACSC Essential Eight.

Desirable

• Certifications such as CISSP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or equivalent.
• Experience with scripting or automation (e.g., PowerShell, Python, Terraform).
• Exposure to container security, CI/CD pipelines, and DevSecOps practices.
• Exposure to regulatory compliance requirements and technical audit support.

Employee Benefits

Austroads has been recognised as a 2025 5-Star Employer of Choice by HRD Magazine and one of The Australian's Best Places to Work 2025.

Working With Us Means Access To

• Flexible working arrangements and hybrid work (home + office)
• Extra 5 days personal leave per financial year
• $500 wellbeing allowance annually
• Additional paid parental leave
• EAP access for employees and immediate family
• Subsidised further education and development opportunities
• LinkedIn Learning subscription for ongoing professional growth

About Austroads

Austroads is the collective of Australian and New Zealand transport agencies. We provide practical, impartial advice, tools, and services to support safe, reliable, and efficient mobility outcomes. We are a national organisation with staff located in Melbourne, Sydney, Brisbane, and across Australia and New Zealand, including teams from NEVDIS and TCA.

We embrace diversity of identity, thought, and experience, and strive for a genuinely inclusive workplace.

The successful candidate will be required to undergo a National Police Check.