IT Security Engineer

Our client is a global software organisation with an office here in Melbourne. Due to growth, they are seeking a mid-level IT Security Engineer to join their team for an initial 6-month contract. Reporting to the Director of IT Operations you will play a critical role in ensuring the security, integrity, and resilience of their systems and infrastructure.

This role requires expertise in identifying security risks, implementing robust security measures, and bridging the gap between technical teams and non-technical stakeholders. Working closely with the global IT, security, and engineering teams, you will contribute to the development, implementation, and monitoring of security solutions that protect software assets. The role also involves creating comprehensive security documentation and ensuring compliance with industry standards and best practices.

Responsibilities:

• Assess, identify, and mitigate security vulnerabilities across software applications, network infrastructure, and systems.
• Develop and implement security policies, procedures, and controls to protect systems from cyber threats.
• Conduct security risk assessments, penetration testing, and vulnerability scanning, and recommend mitigation strategies.
• Monitor, analyse, and respond to security incidents, providing rapid response and effective resolutions.
• Ensure compliance with relevant security frameworks, standards, and regulations (e.g., ISO 27001, Cyber Essentials Plus or NIST, GDPR).
• Provide security awareness training and guidance to employees and teams to foster a security-first culture.
• Maintain and improve security logging, monitoring, and incident response processes.
• Develop clear and actionable security documentation, including risk assessments, security architecture diagrams, and compliance reports.
• Collaborate with cross-functional teams to integrate security requirements into DevSecOps workflows.
• Stay up to date with emerging cybersecurity threats, technologies, and trends, and implement proactive measures to safeguard company assets.

Skills required:

• Demonstrated experience in cybersecurity, risk assessment, and security incident management.
• Strong knowledge of network security, cloud security, and application security principles.
• Hands-on experience with security tools such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection.
• Proficiency in scripting and automation for security tasks (e.g., Python, PowerShell, Bash).
• Experience implementing security frameworks such as ISO 27001, NIST, or CIS Controls.
• Familiarity with secure coding practices and DevSecOps methodologies.
• Strong analytical skills for detecting, analysing, and mitigating security threats.
• Excellent verbal and written communication skills, including the ability to create clear security documentation and reports.

Qualifications & Prerequisite Requirements:

• 3+ Years of enterprise IT experience, with at least 1 year of direct experience in cybersecurity.
• Tertiary qualifications in Computer Science, Cybersecurity, Engineering, or a related field.
• Industry certifications such as CISSP, CISM, CEH, or Security+ preferred.
• Familiarity with cloud security (AWS, Azure) is advantageous.
• Experience with security monitoring, analysis, and incident response tools is highly desirable.

For more information please contact Shelley on 0418 572 482 or email shelley.harrison@talentinternational.com the successful candidate will need to pass a national police and employment check.