Security Engineer

Security Operations Engineer | Permanent | Sydney CBD
Are you a hands-on cybersecurity professional looking to take full ownership of a modern security stack? We are partnering with a highly respected organization in the regulated sector to find their next Security Operations Engineer.
In this permanent, Sydney CBD-based role, you will be the operational powerhouse keeping the environment secure, reporting directly to the Head of Cyber. While leadership focuses on broader cybersecurity strategy and uplift, you will own the day-to-day tuning, monitoring, and incident response.
What You Will DoOperate and fine-tune core security tooling, covering endpoint detection (EDR/MDR), network, email, and identity protection.Lead the triage, investigation, and response to security alerts and incidents.Continuously refine detection rules and policies to cut down on false positives and close coverage gaps.Coordinate routine vulnerability management and drive remediation activities.Partner with external vendors (including MDR providers) and internal teams to translate security strategy into practical implementation.Maintain runbooks and produce clear reporting on threat activity and security posture for both technical and executive audiences.
What You Bring to the TableA degree in Computer Science, IT, Cybersecurity, or a related discipline.A minimum of 4 years of hands-on experience in a security operations or cybersecurity role.Strong operational experience with the Microsoft Security suite (Defender, Sentinel, Entra ID).Exposure to network/email detection and application control (experience with Darktrace, Sophos MDR, or ThreatLocker is highly regarded).Practical ability with KQL, PowerShell, or other scripting languages for investigation and automation.A solid understanding of frameworks like the ACSC Essential Eight, ISO 27001, NIST, and MITRE ATT&CK.Previous exposure to financial services or highly regulated environments is a massive advantage.Relevant industry certifications (e.g., CompTIA Security+, Microsoft SC-200, GIAC) are highly desirable.
Why This Role?This is a rare opportunity to be the technical anchor for a business that takes security seriously. You will have the autonomy to tune a premium tech stack, drive real security uplifts, and work closely with leadership in a fast-paced environment without being bogged down by red tape.
Interested? Send me a DM or apply directly to discuss this exclusive opportunity!