Security Engineer

You’re only human.   

It’s a strange thing to say, because us humans are capable of incredible things. And at Medibank, we know our greatest potential lies in the people who work with us.   

We strive to make real, fundamental change, driven by a simple purpose: to create the best health and wellbeing for all of Australia.  

About the Role

We are looking for a skilled Security Engineer to design, build, and operate enterprise-grade security platforms.

This is a hands-on engineering role where you will play a critical part in strengthening organisational security posture through the implementation of robust controls, platforms, and frameworks aligned to regulatory and compliance obligations. You will work across complex environments to protect sensitive data, critical systems, and customer assets against evolving cyber threats.

This role is ideal for someone who thrives in mature governance ecosystems, where risk, compliance, and security engineering intersect to deliver secure-by-design outcomes.

Key Responsibilities:

• Design, implement, and operate security platforms spanning:




• Endpoint Detection & Response (EDR)


• Data Loss Prevention (DLP)


• Email and Web Security


• Vulnerability Management


• Cloud Security (CSPM/CWPP)




• Ensure solutions align with enterprise security standards, regulatory frameworks, and internal governance controls


• Contribute to the development of security guardrails, policies, and technical standards


• Embed risk-based security controls across systems and applications

Risk, Compliance & Assurance

• Translate technical vulnerabilities into business risk to support governance decision-making


• Ensure alignment with recognised frameworks such as NIST, CIS Controls, Zero Trust, and MITRE ATT&CK


• Support audit, regulatory, and assurance activities through strong documentation and evidence-based practices


• Drive risk-based vulnerability management, including prioritisation, remediation tracking, and SLA adherence

Engineering & Innovation

• Build and deploy modern, automated security solutions to detect and respond to threats


• Develop security tooling, automation, and integrations to improve operational efficiency


• Conduct proof-of-concepts and technology evaluations aligned to enterprise and regulatory requirements


• Stay ahead of emerging threats, vulnerabilities, and attack methodologies

Stakeholder Engagement

• Partner with Security Operations, Risk & Assurance, Data Governance, and Architecture teams


• Provide expert guidance on security design in complex, regulated environments


• Collaborate with vendors, MSSPs, and strategic partners

What We’re Looking For:

• 5+ years in Security Engineering or Cyber Security roles


• Proven experience working within highly regulated industries (e.g. healthcare, finance, insurance, government)


• Strong understanding of security governance, risk management, and compliance frameworks

• Deep experience across multiple domains:




• Endpoint Security (EDR, application control)


• SIEM platforms (Splunk, Sentinel, Elastic)


• Vulnerability management tools (Nessus, Qualys, Rapid7)


• Network security (Firewalls, IDS/IPS)


• Data protection and email/web security tools




• Experience implementing policy-driven and risk-based security controls


• Knowledge of cloud security and modern enterprise architectures

• Strong understanding of:




• Risk assessments and threat modelling


• Control design and assurance


• Regulatory obligations and audit readiness




• Ability to operate effectively in environments with strict governance, compliance, and reporting requirements

Attributes:

• Strong analytical and problem-solving skills


• Ability to communicate complex technical concepts to business stakeholders


• Detail-oriented with a focus on documentation and auditability


• Collaborative mindset with ability to influence across teams


• Passion for continuous learning and staying ahead of cyber threats

Imagine working with us 

We understand that work means different things to everyone...  We know happy, healthy people make great teams, and great teams put more heart into each customer and patient interaction. And that’s why we’re reinventing work.    

Imagine a workplace that helps you and your family thrive.  Where connection, personal development and health and wellbeing are front of mind. To learn more about our benefits go to https://careers.medibank.com.au/culture/rewards-benefits/

For you, work should help you Live Better. It should bring you fulfillment and joy. And with Medibank, it could. 

Inclusion and Accessibility  

We believe in everyone's potential and strive to make Medibank inclusive for all because different perspectives make us better. We encourage applications from everyone, including Aboriginal and Torres Strait Islander peoples, neurodivergent candidates, LGBTQIA+ community including transgender and gender diverse candidates and candidates with a disability.

If you need adjustments or alternative formats at any stage of the recruitment or employment journey, we’re here to help.  You can let us know directly in the application form, or if you’d prefer to discuss before applying, please reach out to us [email protected] or (03) 8622 5666. Learn more about our commitments and employee stories at https://careers.medibank.com.au/diversity-inclusion/(please copy and paste the URL onto your browser)

Medibank proudly recognised as Best Enterprise Organisation, 2026 AFR BOSS Best Places to Work