Cyber Security Engineer

2 hours ago

Sydney, AustraliaSenior

Responsibilities

Maintain and operationally optimise security tools and controls including EDR, SIEM, proxy, email gateway, vulnerability scanning, application control, and WAF.
Build and implement new security controls, enhance existing controls, and create detections for evolving threats.
Automate cyber security tasks such as artefact collection and threat-intelligence integration.
Assist with significant security incidents, security testing, vulnerability scanning, and penetration-testing activities.
Manage issues identified during security testing from identification through resolution.
Prepare management, Board, and regulatory reporting and support security training and awareness.
Develop and maintain security documentation including policies, procedures, metrics, use cases, and reporting.
Perform and manage data and threat-risk assessments and liaise with internal and external assurance functions.

Experience working within a security operations centre environment.
Hands-on practical knowledge of Kubernetes technologies including GKE, EKS, and Helm.
In-depth knowledge of Elasticsearch SIEM using ECK.
Extensive experience building and maintaining scalable big-data pipelines using technologies such as Kafka, Vector, and OTEL.
Experience with Terraform, Ansible, or other infrastructure-as-code services.
Proficiency with a programming language, specifically Python.
Exposure to security frameworks including NIST, ASD, and Swift CSP.
Experience assessing and investigating security alerts, including SIEM alerts and phishing emails.
Exposure to configuring security tools such as SIEM, EDR, TIP, email security, and proxy systems.
Familiarity with Windows, Linux, VMS, Active Directory, Exchange, and SQL.
Familiarity with cloud platforms including GCP and AWS.
Experience developing security-related policies, procedures, and standards and applying risk and control mapping techniques.
An IT degree focused on IT Security is desirable.
Certifications such as GCFA, GCFR, GCTI, or GCIH are desirable.
Understanding of the Australian regulatory environment for financial services and clearing and settlement providers is desirable.
Candidates must be legally authorised to work in Australia on a permanent basis without restrictions and must complete background, reference, and police checks.

Flexible and hybrid working options are available, including consideration of part-time or other flexible arrangements.
ASX promotes diversity, inclusion, employee-led networks, wellbeing, volunteering, and cultural and religious events.

1,001-5,000 employees