Lead Security Engineer - Endpoint, Identity & Data Protection
A hands-on security engineering lead role in Qantas Group's Cyber Defence team, owning core security platforms (endpoint, identity, data protection, gateways, cloud/SaaS security) end-to-end from evaluation through deployment to live service, while partnering with business teams, the SOC, and vendors.
- Compensation
- Not disclosed
- Location
- Sydney, Australia
- Work setup
- Not specified
- Seniority
- Lead
- Employment
- Full time
- Experience
- 1+ years
- Category
- Security
- Posted
Skills
Must have
- At least 7 years' experience in cyber security, information security or technology risk, including hands-on security engineering
- Technical skills across EDR, ITDR, network security, secure web gateway, email security, DLP, cloud and SaaS security, SIEM
- Demonstrated experience owning and operating enterprise security platforms in BAU, with strength in endpoint and identity controls
- Experience securing cloud and SaaS environments, including AWS, Microsoft 365, CSPM and CASB controls
- Proven experience taking a security technology from evaluation through deployment into production
- Experience managing security service providers to agreed SLAs and supporting security operations with detection content and telemetry
- Experience conducting cyber security and technology risk assessments and developing governance, policies, standards and control frameworks
- Strong analytical and problem-solving skills, translating technical risks into business impacts
- Excellent stakeholder management, influencing, advisory and communication skills including executive-level reporting
- Experience in large, complex or regulated environments such as aviation, financial services or critical infrastructure
Nice to have
- Experience with AI Detection & Response / AI-based cyber threat defence
- Familiarity with frameworks and certifications such as NIST, ISO 27001, Essential Eight, SOCI, PCI DSS, CISSP, CCSP or CISM
Full description
Lead Security Engineer - Endpoint, Identity & Data Protection
- Become a part of our Qantas Group Cyber Defence Team
- Join an amazing team that values and prioritises cyber security, in a hands-on engineering role across the core security platforms that defend the Group!
- Permanent role based in Sydney OR Melbourne
At Qantas, we represent Australia to the world. Our diverse country is known for its unique spirit, mateship, and a can-do attitude. Together we’re strong and resilient, and we work hard to make sure we’re always at our best.
The Lead Security Engineer - Endpoint, Identity & Data Protection ownsa subset of our core security platforms end to end, from evaluation through deployment and into live service. The portfolio spans endpoint, identity, network edge, web gateway, email gateway, data protection, cloud security, SaaS security, and AI detection and response, and there is scope to specialise in a subset of it.
This is a hands-on tools engineering role and relationships are central to it. You will partner with business and technology teams across the Group on control coverage and effectiveness.
Responsibility’s including
- Shape the 1-3 year plan for your platforms, aligning priorities with the broader Cyber strategy, business goals and emerging technology opportunities.
- Identify new capability, run the evaluation and proof of value, and take the technology through deployment into production and steady state service.
- Own your platforms once live, including control health reporting, policy tuning, coverage and continuous improvement.
- Build strong partnerships across business, technology, vendors and industry peers, and govern controls, risks, suppliers and service performance to support regulatory, privacy and PCI DSS obligations.
- Service our Security Operations Centre with the detections and telemetry they need, and partner with Cyber Assurance to keep controls evidenced.
What you will bring
- At least seven years' experience in cyber security, information security or technology risk, including hands-on experience as a security engineer or in a closely aligned technical role.
- Technical Skils:Endpoint Detection & Response (EDR), Identity Threat Detection & Response (ITDR), Network Security, Secure Web Gateway, Email Security, Data Loss Prevention (DLP), Cloud Security, SaaS Security, Security Engineering, SIEM, Security Governance, Cybersecurity, Information Security
- Emergent Tech - AI Detection & Response would be advantageous
- Demonstrated experience owning and operating enterprise security platforms in a business-as-usual environment, with particular strength in endpoint and identity controls.