Senior Security Engineer: Cloud, AppSec & SIEM Ownership

Emmbr; Sydney; Hybrid; AUD 90,000 - 140,000; Full time

Job summary

Emmbr in Sydney is seeking a hands-on Security Engineer to become the key internal security resource across SecOps, Cloud/SaaS security and AppSec. You will report to IT & Security Leaders and collaborate with engineering teams to embed secure practices.

Responsibilities include managing incidents with an outsourced SOC, leading vulnerability management across corporate and cloud environments, and implementing controls for identity, data protection, and ISO 27001 readiness.

Qualifications

• Hands-on experience in Security Engineering or SecOps.
• Broad exposure to endpoint security, SIEM, vulnerability management, IAM, cloud/SaaS security.
• Comfortable investigating security issues themselves, not only at advisory level.
• Exposure to secure development or application security principles.

Responsibilities

• Act as the main internal security contact, coordinating with an outsourced SOC.
• Own day-to-day vulnerability management across corporate, cloud and SaaS environments.
• Work with engineering teams to strengthen secure development practices and AppSec.
• Review new SaaS platforms from a security perspective, especially with sensitive data.
• Help implement controls across identity, endpoints, data protection, cloud security and ISO 27001 readiness.

Skills

Security Eng

SecOps

Vuln Mgmt

IAM

Cloud Security

AppSec

SaaS Security

Incident Response

Endpoint Security

Tools

CrowdStrike

Sumo Logic

Proofpoint

Okta

Nullify

UpGuard

Job description

Emmbr in Sydney is seeking a hands-on Security Engineer to become the key internal security resource across SecOps, Cloud/SaaS security and AppSec. You will report to IT & Security Leaders and collaborate with engineering teams to embed secure practices.

Responsibilities include managing incidents with an outsourced SOC, leading vulnerability management across corporate and cloud environments, and implementing controls for identity, data protection, and ISO 27001 readiness.