Cyber Security Engineer

About BizCover

BizCover is Australia and New Zealand's leading online business insurance platform and the first comparison-and-buy site of its kind in the region. We make insurance simple for small business: our platform lets customers compare quotes from leading insurers, choose their cover, and buy a policy online in minutes. More than 300,000 small businesses trust BizCover to protect what they've built, and our team of 250+ across our AU and NZ offices is a mix of thinkers, creators, and doers who love solving real problems for real people.

As we grow, so does our responsibility to protect our customers' data and our systems, which is where you come in.

What you'll do

• Design, build, and maintain security solutions across firewalls, endpoint protection, identity management, and cloud security.
• Monitor security events, investigate incidents, and lead triage, root cause analysis, and remediation.
• Manage core security platforms — EDR, SIEM, Vulnerability Management, CSPM, MDM, Identity Providers, Zero Trust, Password Management, Email Security, and GRC.
• Run vulnerability assessments, security reviews, and risk assessments across infrastructure, applications, and third-party suppliers.
• Own Identity and Access Management (IAM), including access reviews and controls.
• Develop and maintain security policies, standards, and procedures.
• Support compliance with frameworks like ISO 27001, NIST, and SOC 2.
• Partner with IT and development teams to embed security into projects from day one.
• Help us adopt AI technologies safely — assessing risks, applying controls, and keeping AI solutions aligned with our security standards.
• Run security awareness activities and keep improving how we operate.

What you'll bring:

• Around 2-3 years in a Cyber Security Engineer, Security Analyst, or similar role.
• Hands-on experience with enterprise security technologies and security operations.
• A track record managing security incidents, vulnerability management, and risk assessments.
• Experience with Identity and Access Management (IAM) and cloud security.
• Familiarity supporting compliance with standards such as ISO 27001, NIST, or SOC 2.
• Comfort working alongside infrastructure, cloud, and application teams to put security controls in place.

Skills that will set you up for success:

• Solid grounding in cyber security principles and best practice.
• Working knowledge of security tooling — firewalls, EDR, SIEM, IAM, CSPM, Vulnerability Management, MDM, Email Security, and GRC platforms.
• Understanding of cloud security, networking, operating systems, and security frameworks.
• Some scripting or automation (PowerShell or Python) is a bonus, not a must.
• Strong analytical and problem-solving instincts.
• Clear communication and the ability to work well with people across the business.
• A knack for juggling priorities and a proactive, improvement-minded approach.

• Hybrid Flexibility: If you are located in Sydney, enjoy a flexible schedule with three days working from the office and two days from home.
• Vibrant Team Culture: Join an energetic, supportive and rewarding workplace with plenty of fun throughout the year from end-of-year and mid-year parties to monthly drinks, cultural celebrations, and so much more!
• Exclusive Perks: Unlock discounts and special offers through our amazing staff app.
• Our charity program proudly partners with One&All, offering employees unique opportunities to contribute, connect and benefit from giving back.
• Dress for Success: Business-casual dress code for a relaxed but professional vibe.
• Room to Grow: Join a growing company that truly offers career progression opportunities.