Junior Cyber Security Engineer, Infrastructure Security

Company overview:

Certifications across the team include OSCP, GPEN and CISSP.

Position summary:

This is a backfill for a team member who is relocating. The Security team is small and hands-on. We need someone who writes code and automation, not just policy. We work hybrid out of Melbourne, usually three days in, two days remote.

Main duties:

• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint
• Write secure coding guidelines and run developer training
• Assess third-party vendors and SaaS integrations for security risk
• Own secrets management, key rotation and KMS policies
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub
• Automate security checks in CI/CD pipelines
• Run threat modelling sessions with engineering teams on new features and architecture changes

Requirements:

• 0-2 years in security engineering, application security or a related engineering role
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Hands-on cloud security experience in AWS, Azure or GCP

Preferred:

• Kubernetes and container security (Falco, OPA Gatekeeper)
• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)
• Contributions to security tools or published CVEs

Pay and benefits:

Salary range: $112,000 - $135,000 per annum

• Hybrid working

Duration: 6 months. Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Bramblerun Pty Ltd.