Security Engineer - Operations

Key Responsibilities

As a Security Engineer – Operations, you will be responsible for the day-to-day operation, administration and continuous improvement of GWF’s cyber security capabilities. Working across security operations, incident response, vulnerability management, security engineering and advisory services, you will play a key role in reducing cyber risk across enterprise and cloud environments. This hands-on role focuses on operating and improving security technologies, investigating security events and providing practical security guidance to stakeholders. It is ideally suited to a well-rounded security professional who enjoys working across technology, people and process domains to deliver measurable security outcomes.  On a day-to-day basis, you will:

• Investigate security alerts, suspicious activity and security incidents, coordinating containment, eradication and recovery activities where required.
• Administer, maintain and optimise security technologies including Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID security controls, Zscaler and vulnerability management platforms.
• Conduct threat hunting activities and proactive security investigations to identify and mitigate emerging cyber threats.
• Operate vulnerability management processes, coordinate security assessments and drive remediation activities based on risk.
• Participate in security reviews of projects, systems and technology changes, providing practical recommendations and security guidance.
• Deliver security awareness initiatives, phishing simulations and targeted training activities to promote a positive security culture.
• Develop scripts, integrations and workflows to automate security processes and improve operational effectiveness.
• Support the delivery of security improvement initiatives, strategic projects and security roadmap activities.

The ideal candidate will have:

• Tertiary qualifications in a relevant technology discipline, with security certifications such as CISSP, Security+, MCSE Security or equivalent highly regarded.
• Demonstrated experience working within enterprise infrastructure and cloud environments, with a solid understanding of monitoring, logging and security operations.
• Strong understanding of information security principles, security controls, protocols and industry standards.
• Hands-on experience with security technologies such as SIEM, endpoint protection, vulnerability management, intrusion detection and related security platforms.
• Experience using PowerShell, Python, APIs, workflow automation or low-code/no-code tools to improve security operations and efficiency.
• Strong stakeholder engagement, communication and relationship-building skills, with the ability to translate technical risks into practical business guidance.
• Proven analytical and problem-solving skills, with the ability to identify issues, prioritise actions and deliver practical outcomes

Sound like a good fit? Apply now.. We'd love to hear from you! During the recruitment process you may be required to complete pre-employment screening tests which include a criminal record check.

At GWF we strive to create a place where everyone belongs, everyone is valued, and everyone has equal opportunity. We encourage applications from people of all ages, nationalities, abilities, and cultures – including Aboriginal and Torres Strait Islander peoples, the LGBTQI+ community and people living with disability.

So we can get to know you in the best possible way, we're happy to adjust our recruitment process to support accessibility needs. Let us know your needs in providing a positive, barrier-free recruitment process.