Information Security Engineer

Information Security Engineer

We are seeking a skilled Information Security Engineer to join our clients team. This role involves deploying and configuring advanced security tools across various domains including network security identity and access management server security and cryptography. The ideal candidate will conduct thorough risk assessments collaborate with crossfunctional teams to manage and mitigate security risks and ensure compliance with industry standards and regulations. This position aims to enhance the organisations security posture protect critical assets and support the continuous improvement of security practices and policies.

Reporting to: Information Security Risk and Compliance Specialist

Responsibilities:

• Technical Expertise: Demonstrate a strong technical understanding of information security concepts common attacks and mitigation techniques making riskbased decisions based on Zero Trust Principles.
• Security Controls Implementation: Design and assist in implementing security controls and guardrails in our platforms and services uplifting the existing security posture of our products and services.
• Design Reviews & SDL: Conduct design reviews threat modeling and ensure a secure development lifecycle (SDL) for our products and features by collaborating with development and infrastructure teams.
• Threat Monitoring: Monitor the external threat environment for emerging threats and advise relevant stakeholders on the appropriate courses of action.
• Continuous Learning: Stay abreast of the latest security threats technologies and research as it applies to our products and services.
• Tool Deployment & Configuration: Deploy and configure security tools supporting various security domains including network security identity and access management server security cryptography and more.
• Best Practices: Drive best practices for IT systems application design and implementation review to ensure compliance with policies and best practices.
• Incident Response: Act as the security incident responder for cyber security incidents and enact the Incident Response Plan.
• Experience: Proven experience as a Security Engineer or in a similar role with over 5 years of expertise in various security domains.

Knowledge and Experience:

• Passion for Security: Demonstrate a passion for Security Risk Mitigation & Compliance.
• IT Security Accreditation: IT security accreditation (CISSP CISM CRISC or other Information Systems Risk qualifications) is desirable.
• ISO27001 Implementation: Strong understanding of the implementation of ISO27001 and experience in the support and operation of an Information Security Management System (ISMS) and other relevant frameworks (e.g. ISO COSO SABSA and NIST).
• Zero Trust & Threat Modelling: Experience in conducting zero trust reviews threat modeling and design reviews on products and services.
• IT Security Principles: Understanding of IT Security principles associated with networks internet email operating systems firewalls VPNs databases virus management cryptography IDS/IPS and access management.
• Cloud Security: Wellversed in information security industry best practices on AWS environments.
• Communication Skills: Ability to communicate complex concepts to technical and nontechnical audiences. Ability to work effectively with teams from different fields of expertise.

Our client is an awardwinning technology company dedicated to helping a range of professionals businesses and individuals thrive in the digital age. They take pride in identifying their clients challenges quickly and providing technologybased solutions that enhance business efficiencies.

They have been at the forefront of technology innovation both across Australia and internationally for over 19 years. The product suite is comprehensive and userfriendly continually revolutionizing workflows improving productivity and increasing profitability while stimulating growth.