Security Engineer

• Develop and implement security policies and procedures for project environments aligned with industry standards and government guidelines (PSPF, ISM)
• Monitor, assess, and manage vulnerabilities in systems and applications
• Configure security tools including firewalls, IDS, and anti-malware software in collaboration with IT
• Create and maintain documentation for security protocols, incident response plans, and guidelines
• Stay current with cybersecurity trends and deliver security awareness training
• Lead incident response efforts, including containment, eradication, recovery, and risk communication
• Conduct cyber risk assessments of systems and technologies
• Implement new cybersecurity strategies, tools, and best practices
• Manage and maintain agreed service levels so cyber security operations align with organisational goals

Cyber Security Engineer

• Design and implement CyberArk Endpoint Privilege Manager solutions across enterprise environments
• Assess endpoint privilege models and develop practical least-privilege approaches
• Configure application control, privilege elevation policies, threat protection, and endpoint security controls
• Gather business and technical requirements and translate them into secure EPM designs
• Develop technical documentation, implementation guides, operational procedures, and knowledge-transfer materials
• Partner with client and internal stakeholders to deliver successful implementations and ongoing optimisation
• Work with enterprise clients across discovery, solution design, implementation, optimisation, and operational uplift

Cybersecurity Consultant – CyberArk EPM

• Design and implement Delinea Privileged Access Management solutions, including Secret Server and related technologies
• Lead client workshops to gather business and technical requirements and translate them into secure PAM designs
• Configure and optimise credential management, session monitoring, password rotation, and privileged account governance controls
• Develop integrations with enterprise systems, including Active Directory, Entra ID, LDAP, SIEM, and identity platforms
• Create technical documentation, implementation artefacts, operational procedures, and knowledge-transfer materials
• Support PAM assessments, remediation activities, maturity uplift, and successful project delivery
• Work with enterprise clients across discovery, architecture, implementation, integration, and operational uplift
• Contribute to securing privileged identities, strengthening governance controls, and reducing risk

Cybersecurity Consultant – Delinea PAM

• Design, build and deploy cloud security capabilities protecting Leidos cloud-based systems, networks and information assets
• Act as a technical Subject Matter Expert across cloud security services and technologies
• Provide guidance on cloud security architectures, shared responsibility models and cloud provider security capabilities
• Partner with global cloud engineering, infrastructure and cyber security teams to deliver secure and scalable solutions
• Work with Microsoft 365, Azure and AWS platform teams to enhance security controls and capabilities
• Support operational cloud security services to keep them effective, compliant and aligned to business needs
• Collaborate with Security Operations and Incident Response teams on investigations, threat detection and remediation
• Develop technical documentation including solution designs, implementation guides, standards and operational procedures
• Identify opportunities to automate security processes and improve operational efficiency
• Contribute to cloud security roadmaps and strategic initiatives strengthening Leidos' global cyber security posture

Cloud Security Engineer

• Act as a trusted cyber security advisor to internal program teams and Defence stakeholders
• Influence system and solution design activities to achieve secure-by-design and cyber-resilient outcomes
• Lead and support Cyber Security Assessment and Authorisation (CSAA) activities across assigned Defence programs
• Partner with systems engineering and project delivery teams to integrate security requirements throughout the capability lifecycle
• Develop and maintain security documentation and assurance artefacts required to achieve and sustain Defence security authorisation
• Drive security governance, risk, and compliance (GRC) outcomes in alignment with Defence security frameworks and program requirements
• Lead cyber security risk management activities and provide trusted risk advice to program and engineering leadership
• Provide subject matter expertise on the PSPF, ISM, and DSPF
• Engage with Defence stakeholders and authorisation authorities to progress security authorisation activities
• Support business development, bid, and capture activities through cyber security expertise and compliance guidance
• Mentor and provide technical leadership to security practitioners across the business
• Require regular travel and direct engagement with Defence stakeholders and customers

Principal Systems & Cyber Security Specialist

• Conduct personnel security clearance assessments in accordance with the Protective Security Policy Framework (PSPF) and agency requirements
• Manage security clearance cases across Baseline, NV1, NV2 and PV clearance levels
• Conduct security interviews and gather information from clearance subjects and relevant stakeholders
• Analyse complex and sensitive information, including employment history, financial circumstances, personal conduct, integrity matters and other relevant vetting factors
• Prepare clear, evidence-based assessments, recommendations and case documentation
• Manage competing priorities and maintain performance against service delivery expectations
• Apply quality assurance processes to vetting documentation and Personal Security Files
• Contribute to continuous improvement initiatives and maintain consistent application of vetting standards
• Support the delivery of high-quality outcomes for Australian Government clients

Security Vetting Professional

• Assist in cyber security risk assessments, audits, and uplift activities
• Support documentation development, including policies, procedures, and risk registers
• Contribute to client reports and presentations
• Conduct control assessments and evidence reviews
• Track remediation actions and support implementation activities
• Maintain awareness of emerging cyber threats and regulatory changes
• Work closely with internal team members and client stakeholders
• Participate in workshops and client meetings

Cyber Security Consultant – GRC

• Lead Compass's risk, compliance and information security functions
• Own certification and audit programmes, including ISO 27001 and PCI DSS
• Maintain the ISMS and manage certification audits and corrective actions
• Scope and maintain PCI DSS compliance for payment processing
• Manage obligations under the Australian Privacy Principles and equivalent UK and Irish regimes
• Conduct privacy impact assessments and privacy-by-design sign-off
• Handle privacy complaints
• Manage information governance, including data classification, retention, disposal and records management
• Own the security and information policy suite with technical input from technology leaders
• Manage regulatory breach notifications and compliance clauses in customer and government contracts
• Respond to customer and government due diligence questionnaires
• Maintain the compliance risk register
• Aggregate information security posture and risk into quarterly reports for the ELT and Board
• Ensure vendor contracts include appropriate data protection and security clauses
• Line manage Legal Counsel
• Oversee legal risk and contract review as part of the broader governance remit

Head of Risk, Compliance and Information Security

• Act as an Okta subject matter expert, providing guidance on identity security, Zero Trust, governance, authentication and authorisation strategies
• Lead discovery workshops, identity assessments, architecture reviews and solution design sessions
• Design and deliver proof-of-concepts, demonstrations and presentations for technical and executive stakeholders
• Translate business, security and compliance requirements into scalable identity solutions
• Design and support solutions across SSO, MFA, Lifecycle Management, Identity Governance, Privileged Access, Auth0 and Identity Threat Protection
• Develop architecture documentation, implementation guides and customer-facing technical artefacts
• Support pre-sales activities, technical responses, implementation planning and service development initiatives
• Contribute to repeatable service offerings including Identity Assessments, Identity Modernisation programs, Governance Reviews, Identity Health Checks and Zero Trust roadmaps

• Act as the Microsoft Sentinel technical SME for workshops, presentations and stakeholder engagements.
• Lead Microsoft Sentinel deployment, configuration and optimisation activities.
• Support migration of SIEM capabilities from legacy platforms to Microsoft Sentinel.
• Design and implement modern security operations processes aligned to the Microsoft Security ecosystem.
• Develop, onboard, tune and operationalise Sentinel analytics rules, hunting queries, workbooks and use cases.
• Enhance threat detection capabilities through advanced analytics, UEBA, threat intelligence and data correlation.
• Design and implement automation and orchestration solutions using Sentinel playbooks and Logic Apps.
• Contribute to AI-driven SOC initiatives, including Microsoft Security Copilot integration and automation opportunities.
• Integrate Microsoft Sentinel with Microsoft Defender, Microsoft XDR, Entra ID and other security technologies.
• Support incident response, threat hunting and continuous improvement initiatives.
• Produce technical documentation, implementation guides and operational runbooks.
• Mentor SOC analysts and engineers through knowledge transfer and capability uplift activities.

Security Engineer jobs in Australia