Senior Cyber Security Engineer Contract Melbourne, Adelaide

Business Enablement

Deliver cyber engineering services that protect business operations and align with risk appetite safety requirements and regulatory obligations.

Partner with Operations IT Networks Projects and Engineering to ensure controls are practical sustainable and enable reliable system performance.

Translate regulatory CI Act and AESCSF requirements into actionable engineering activities.

Provide expert influential advice on complex security issues including OT/IT convergence vendor access remote support and safety-critical industrial environments.

Cyber Security Engineering

Design implement and support security controls across IT OT AI and IoT systems.

Deploy and manage technologies such as firewalls SASE/SSE EDR/XDR SIEM/SOAR IAM encryption and industrial security platforms.

Implement secure network segmentation across OT environments including DMZs Zone/Conduit models and vendor remote access models.

Embed DevSecOps practices into CI/CD pipelines including SCA SAST/DAST secrets management and build pipeline hardening.

Use automation (IaC policy-as-code configuration compliance tools) to maintain secure baselines.

Oversee delivery of secure engineering outcomes for projects maintenance activities and system upgrades.

Risk Management & Compliance

Perform risk assessments threat modelling vulnerability analysis and configuration compliance reviews.

Support uplift of AESCSF maturity and compliance with ISA/IEC 62443 NIST CSF ASD Essential 8 and CI Act obligations.

Identify control gaps and work with Technology and Engineering teams to implement mitigations.

Maintain documentation standards patterns and OT system security baselines.

Incident Response & Resilience

Participate in the Cyber Security Incident Response Team (CSIRT) as an Incident Handler.

Support IR activities across IT and OT environments including containment forensics and recovery.

Maintain IR playbooks and contribute to tabletop and purple-team exercises.

Provide out-of-hours support for critical cyber or operational incidents.

Threat Intelligence Integration

Integrate internal and external threat intelligence into engineering monitoring and IR processes.

Track OT/ICS threat trends (e.g. ransomware targeting manufacturing ICS-specific malware).

Use TI insights to shape architecture decisions vulnerability management and control prioritisation.

Architecture Support

Contribute to development of cyber security architecture patterns for IT OT IoT and Cloud.

Support design reviews and key design decision processes.

Ensure engineering solutions align with enterprise architecture and secure-by-design principles.

Continuous Improvement

Identify automation opportunities and improve efficiency of control implementation monitoring and incident response.

Stay current with evolving threats emerging technologies and best practices in ICS and enterprise cyber security.

Drive uplift of cyber engineering processes runbooks standards and asset security practices.

Contribute to the Cyber Safety Program and broader security uplift initiatives.

Bachelors degree in cyber security IT engineering or related field.

Industry certification (e.g. CISSP or equivalent).

Minimum 6 years experience in cyber security engineering roles across IT and/or OT environments.

Demonstrated experience with AESCSF ISA/IEC 62443 ASD Essential 8 or NIST frameworks.

Hands-on experience working within OT/ICS environments (SCADA DCS PLCs industrial networks safety systems).

Experience delivering security outcomes across distributed industrial sites or critical infrastructure.

Technical Skills

Excellent knowledge of cyber security principles management frameworks and practices particularly relating to OT.

Experience with application whitelisting SASE firewalls proxy email filtering anti-malware DLP cloud platforms and other security technologies.

Familiarity with DevSecOps automation and orchestration tools.

Familiarity and experience with Data protection and classification

Experience with vulnerability management/scanning web application security API security Zero Trust PAM NDR UEBA and network-based encryption.

Proficiency with Microsoft (Azure O365) Linux (Red Hat) and mobile platforms (iPhone & Android).

Soft Skills

Strong communication and stakeholder engagement skills.

Excellent analytical and organizational skills.

Ability to identify assess and communicate cyber security risks.

Leadership

Experience providing thought leadership or mentoring within a cyber security context