Security Engineer - Operations

Company description:

George Weston Foods makes some of Australia and New Zealand's favourite and most innovative products! Chances are that one of our iconic brands is sitting on your table, packed in your lunchbox or resting in your pantry right now. Join the team and be part of one of our iconic brands like Tip Top®, Abbotts Village Bakery®, Burgen®, Golden®, DON®, KR Castlemaine® and Yumi's®.

Job description:

Key Responsibilities

As a Security Engineer - Operations, you will be responsible for the day-to-day operation, administration and continuous improvement of GWF's cyber security capabilities. Working across security operations, incident response, vulnerability management, security engineering and advisory services, you will play a key role in reducing cyber risk across enterprise and cloud environments. This hands-on role focuses on operating and improving security technologies, investigating security events and providing practical security guidance to stakeholders. It is ideally suited to a well-rounded security professional who enjoys working across technology, people and process domains to deliver measurable security outcomes. On a day-to-day basis, you will:

• Investigate security alerts, suspicious activity and security incidents, coordinating containment, eradication and recovery activities where required.
• Administer, maintain and optimise security technologies including Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID security controls, Zscaler and vulnerability management platforms.
• Conduct threat hunting activities and proactive security investigations to identify and mitigate emerging cyber threats.
• Operate vulnerability management processes, coordinate security assessments and drive remediation activities based on risk.
• Participate in security reviews of projects, systems and technology changes, providing practical recommendations and security guidance.
• Deliver security awareness initiatives, phishing simulations and targeted training activities to promote a positive security culture.
• Develop scripts, integrations and workflows to automate security processes and improve operational effectiveness.
• Support the delivery of security improvement initiatives, strategic projects and security roadmap activities.

The ideal candidate will have:

• Tertiary qualifications in a relevant technology discipline, with security certifications such as CISSP, Security+, MCSE Security or equivalent highly regarded.
• Demonstrated experience working within enterprise infrastructure and cloud environments, with a solid understanding of monitoring, logging and security operations.
• Strong understanding of information security principles, security controls, protocols and industry standards.