Security Engineer

NS InfoSec protects more than 4,000 organisations, from regional hospitals to Fortune 500 manufacturers. Training budget covers one SANS course or equivalent per year.

The role:

NS InfoSec is looking for a Security Engineer to join a small, steady team. The Cloud Security team is small and hands-on. We need someone who writes code and automation, not just policy. We work hybrid out of Sydney, usually three days in, two days remote.

Duties:

• Maintain EDR coverage with CrowdStrike Falcon or Microsoft Defender for Endpoint.
• Build detections and response playbooks in Splunk, Microsoft Sentinel or Elastic.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Own secrets management, key rotation and KMS policies.
• Automate security checks in CI/CD pipelines.

What you need:

• 2+ years in security engineering, application security or a related engineering role.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Experience with SIEM, EDR or vulnerability management tools.
• Ability to explain security issues to engineers without lecturing them.
• Programming or scripting ability in Python, Go or similar.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Preferred qualifications:

• Contributions to security tools or published CVEs.
• Malware analysis or digital forensics background.

Rate: $166,000-$210,000 per year

What we offer:

• Superannuation on top of salary.
• Study leave.
• Salary packaging.
• Employee assistance program.
• Above-award pay rates.
• Paid parental leave.

Aboriginal and Torres Strait Islander people are encouraged to apply.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at NS InfoSec.