An exciting opportunity for a Senior Cyber Security Engineer to work with cross-functional teams to design, implement, and maintain security systems.03rd December, 2024
About UsAdvanced Design Technology (ADT) is a progressive, privately owned Australian company specialising in the design, development, manufacture of complex electronic systems.
We excel at building advanced innovative solutions for sensitive and harsh environments, applying cutting edge technology to bring game changing capability to our customers.
To support a rapidly expanding business, we are seeking a senior professional with demonstrated experience in cyber security engineering.
This Canberra-based position is permanent and full time; however, part time and flexible working arrangements will be considered for the right candidate.The Role
Reporting directly to the Managing Director, the Senior Cyber Security Engineer will be responsible for protecting our organisation's digital infrastructure, ensuring the confidentiality, integrity, and availability of sensitive information, and leading efforts to defend against emerging cyber threats.
As a Senior Cyber Security Engineer, you will work closely with cross-functional teams to design, implement, and maintain security systems and protocols while ensuring compliance with industry best practices and regulations.The key responsibilities for this role include:
Lead Security Initiatives:
Design and implement security solutions to safeguard networks, systems, and data from cyber threats, including firewalls, intrusion detection/prevention systems, encryption technologies, and endpoint protection tools.Risk Assessment & Vulnerability Management:
Conduct regular security assessments, vulnerability scans, and penetration testing to identify potential weaknesses, recommend mitigations, and ensure proactive risk management.Incident Response & Forensics:
Lead efforts in responding to and investigating security incidents, providing expert analysis on the scope and impact of breaches, and recommending corrective actions.Security Architecture:
Provide advice to the product and system owner to integrate security best practices into the design, architecture, and deployment of new systems and applications.Assurance:
Spearhead security accreditation activities and participate in workshops, audits and assurance activities, including High Assurance, Raise the Bar, NIST, CMMC and DISP Cyber Security.Implementation:
Liaise with the software and IT teams to implement the resulting design and maintain the solution as updates and changes are needed.Threat Intelligence & Monitoring:
Monitor security alerts, analyse threats, and stay up to date with the latest security trends, vulnerabilities, and attack methods to effectively respond to evolving risks.Policy & Compliance Management:
Assist in developing, implementing, and enforcing security policies, procedures, and protocols to ensure compliance with relevant regulations (e.g., ISO27001, ACSC ISM, Essential 8).Mentorship & Leadership:
Mentor junior engineers, provide guidance on security best practices, and assist in building a robust security culture within the organisation.Collaboration:
Work with cross-functional teams (e.g., network, systems, development) to ensure security requirements are met throughout the lifecycle of IT projects.Security Awareness:
Contribute to the development and delivery of security training and awareness programs to educate employees about security risks and best practices.Other duties as directed by the Managing Director, as may reasonably be required.To be successful you will possess:
Demonstrated ability to analyse complex security issues, assess risks, and recommend actionable solutions.Strong troubleshooting and incident response skills to quickly mitigate security threats.Meticulous attention to detail, particularly when reviewing logs, configurations, and system behaviours.Excellent verbal and written communication skills, with the ability to convey technical concepts to non-technical stakeholders.Ability to work effectively as part of a cross-functional team and lead initiatives.Demonstrated ability to establish processes and think strategically in a rapidly maturing organisation.Demonstrated experience managing multiple streams of work with differing needs to successful completion.Possess a business focused mindset and be able to deliver under pressure to meet tight timeframes whilst managing competing priorities, responding quickly and flexibly to change.Be an innovative leader who encourages a positive culture of continuous improvement.Qualifications:
Bachelor's degree in Computer Science, Information Technology, Cyber Security, or related field (Master's degree preferred).Experience:
5+ years of experience in cyber security engineering, with at least 2 years in a senior or leadership role.Proven experience in designing and implementing security solutions across various platforms (cloud, on-premises, hybrid).Strong experience with threat detection, incident response, risk management, and penetration testing.Certifications (Preferred):
CISSP (Certified Information Systems Security Professional)CEH (Certified Ethical Hacker)CISM (Certified Information Security Manager)CompTIA Security+GIAC (Global Information Assurance Certification)Technical Skills:
Proficient in security tools and technologies such as SIEM (Security Information and Event Management) using Sentinel and Splunk, IDS/IPS, firewalls & network with SDN solutions such as Aruba Central and Clearpass, VPNs, Purview DLP, endpoint protection, and vulnerability management.An understanding of CASB solutions including Microsoft Cloud App Security.Proficient in configuring and maintaining Microsoft Intune, Microsoft Purview, Defender for Endpoint, Identity Governance, Purview Information Protection and other Microsoft365 E5 solutions.Experience with scripting languages (PowerShell, etc.)
for automation and incident response, including module development.Familiarity with cloud security (Azure, GCP) and securing cloud-native applications, including Logic Apps, PowerApps, PowerAutomate and EntraID Enterprise Application scopes and permissions.Experience with modern single sign on and provisioning protocols including SAML, OIDC and SCIM and the interaction with EntraID Conditional Access.Deep understanding of network security protocols and encryption technologies.Experience with security frameworks (NIST, ISM, ISO 27001, etc.
).
#J-18808-Ljbffr