Senior Cyber Security Engineer - Contract - Melbourne, Adelaide

Business Enablement

· Deliver cyber engineering services that protect business operations and align with risk appetite, safety requirements, and regulatory obligations.

· Partner with Operations, IT, Networks, Projects, and Engineering to ensure controls are practical, sustainable, and enable reliable system performance.

· Translate regulatory, CI Act, and AESCSF requirements into actionable engineering activities.

· Provide expert, influential advice on complex security issues, including OT/IT convergence, vendor access, remote support, and safety-critical industrial environments.

Cyber Security Engineering

· Design, implement, and support security controls across IT, OT, AI and IoT systems.

· Deploy and manage technologies such as firewalls, SASE/SSE, EDR/XDR, SIEM/SOAR, IAM, encryption, and industrial security platforms.

· Implement secure network segmentation across OT environments, including DMZs, Zone/Conduit models, and vendor remote access models.

· Embed DevSecOps practices into CI/CD pipelines, including SCA, SAST/DAST, secrets management, and build pipeline hardening.

· Use automation (IaC, policy-as-code, configuration compliance tools) to maintain secure baselines.

· Oversee delivery of secure engineering outcomes for projects, maintenance activities, and system upgrades.

Risk Management & Compliance

· Perform risk assessments, threat modelling, vulnerability analysis, and configuration compliance reviews.

· Support uplift of AESCSF maturity and compliance with ISA/IEC 62443, NIST CSF, ASD Essential 8, and CI Act obligations.

· Identify control gaps and work with Technology and Engineering teams to implement mitigations.

· Maintain documentation, standards, patterns, and OT system security baselines.

Incident Response & Resilience

· Participate in the Cyber Security Incident Response Team (CSIRT) as an Incident Handler.

· Support IR activities across IT and OT environments, including containment, forensics and recovery.

· Maintain IR playbooks and contribute to tabletop and purple-team exercises.

· Provide out-of-hours support for critical cyber or operational incidents.

Threat Intelligence Integration

· Integrate internal and external threat intelligence into engineering, monitoring, and IR processes.

· Track OT/ICS threat trends (e.g., ransomware targeting manufacturing, ICS-specific malware).

· Use TI insights to shape architecture decisions, vulnerability management and control prioritisation.

Architecture Support

· Contribute to development of cyber security architecture patterns for IT, OT, IoT, and Cloud.

· Support design reviews and key design decision processes.

· Ensure engineering solutions align with enterprise architecture and secure-by-design principles.

Continuous Improvement

· Identify automation opportunities and improve efficiency of control implementation, monitoring and incident response.

· Stay current with evolving threats, emerging technologies, and best practices in ICS and enterprise cyber security.

· Drive uplift of cyber engineering processes, runbooks, standards, and asset security practices.

· Contribute to the Cyber Safety Program and broader security uplift initiatives.

· Bachelor’s degree in cyber security, IT, engineering or related field.

· Industry certification (e.g., CISSP or equivalent).

· Minimum 6+ years’ experience in cyber security engineering roles across IT and/or OT environments.

· Demonstrated experience with AESCSF, ISA/IEC 62443, ASD Essential 8 or NIST frameworks.

· Hands-on experience working within OT/ICS environments (SCADA, DCS, PLCs, industrial networks, safety systems).

· Experience delivering security outcomes across distributed industrial sites or critical infrastructure.

Technical Skills

· Excellent knowledge of cyber security principles, management frameworks, and practices, particularly relating to OT.

· Experience with application whitelisting, SASE, firewalls, proxy, email filtering, anti-malware, DLP, cloud platforms, and other security technologies.

· Familiarity with DevSecOps, automation, and orchestration tools.

· Familiarity and experience with Data protection and classification

· Experience with vulnerability management/scanning, web application security, API security, Zero Trust, PAM, NDR, UEBA, and network-based encryption.

· Proficiency with Microsoft (Azure, O365), Linux (Red Hat), and mobile platforms (iPhone & Android).

Soft Skills

· Strong communication and stakeholder engagement skills.

· Excellent analytical and organizational skills.

· Ability to identify, assess, and communicate cyber security risks.

Leadership

· Experience providing thought leadership or mentoring within a cyber security context