" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003eSecurity Engineer - all nexon locations\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"19926\"\u003e IT \u0026amp; Telecomms \u003c/li\u003e \u003cli data-id=\"19927\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"19928\"\u003e Australia wide \u003c/li\u003e \u003cli data-id=\"19929\"\u003e Permanent / Full Time \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 9/11/2026 \u003c/p\u003e \u003c/div\u003e \u003cdiv class=\"description\"\u003e \u003cdiv\u003eWe are a fast-paced Managed Security Services Provider protecting clients across Australia. Our SOC runs on a growing set of in-house tools, integrations and automations, and we need a Security Engineer to help build, run and improve them.\u003cbr\u003e\u003cbr\u003e\u003c/div\u003e You will sit between our security operations and engineering functions, turning analyst pain points into reliable, well-tested tooling. You will build applications and API integrations that connect our SIEM, SOAR, enterprise platforms and collaboration tools, and you will use AI platforms to make our analysts faster and our services more consistent. This is a hands-on build-and-support role with a clear path towards senior and lead engineering.\u003cbr\u003e\u003cbr\u003e \u003cdiv\u003e\u003cstrong\u003eKey Responsibilities\u003c/strong\u003e\u003c/div\u003e \u003cstrong\u003eTooling and application development\u003c/strong\u003e\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003eDesign, build, test and maintain internal cyber security tools, applications and user interfaces that support SOC and client service delivery.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003eDevelop integrations between SIEM, SOAR, ticketing, enterprise applications and collaboration platforms using REST APIs, webhooks and event-driven patterns.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003eBuild and maintain SOAR playbooks, automations and connectors that reduce manual analyst effort.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003eDesign and build front-end interfaces (dashboards, portals, analyst workflow tools) that are clear, fast and easy to use.\u003cbr\u003e\u003cbr\u003e \u003cstrong\u003eAI-enabled security operations\u003c/strong\u003e\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003eIntegrate AI platforms and large language model services into SOC workflows, such as alert triage, enrichment, summarisation, reporting and knowledge retrieval.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003eApply secure and responsible AI practices, including prompt design, data handling, access control and output validation.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u003c/span\u003eEvaluate new AI tools and provide practical recommendations on where they add value.\u003cbr\u003e\u003cbr\u003e \u003cstrong\u003eCI/CD and infrastructure\u003c/strong\u003e\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003eBuild and maintain CI/CD pipelines with security controls embedded (code scanning, dependency and secrets checks, automated testing).\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003eProvision and manage environments using Infrastructure as Code (Terraform).\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u003c/span\u003eMonitor, troubleshoot and support production tooling, including incident response for tooling outages and defects.\u003cbr\u003e\u003cbr\u003e \u003cstrong\u003eCollaboration and continuous improvement\u003c/strong\u003e\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eWork closely with SOC analysts, detection engineers and service delivery teams to capture requirements and deliver working solutions.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eWrite clear technical documentation, runbooks and release notes.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eTake part in code reviews, agile ceremonies and post-incident reviews.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eKeep up with security engineering, DevSecOps and AI developments, and share learnings with the team.\u003cbr\u003e\u003cbr\u003e \u003cdiv\u003e\u003cstrong\u003eEssential Skills and Experience\u003c/strong\u003e\u003c/div\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eProven experience (3+ years) building and supporting complex cyber security tooling or applications (commercial, in-house or project-based).\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eDeep understanding of API integration, including authentication (OAuth2, API keys, tokens), rate limiting, error handling, pagination and webhooks.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eDemonstrated experience building integrated applications with enterprise applications, SIEM and SOAR platforms, and collaboration platforms (for example Microsoft Teams, Slack or similar).\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003ePractical experience using AI platforms and services in applied solutions.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eWorking knowledge of CI/CD pipelines (such as GitHub Actions, GitLab CI or Azure DevOps) and Terraform.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eFront-end/UI development experience (for example React, TypeScript/JavaScript, HTML/CSS).\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eProficiency in at least one scripting or backend language, ideally Python.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eSound understanding of security fundamentals and secure coding practices.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eStrong communication skills and the ability to work in a fast-moving, client-driven environment.\u003cbr\u003e \u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eAustralian citizenship or permanent residency (mandatory).\u003cbr\u003e\u003cbr\u003e \u003cdiv\u003e\u003cstrong\u003eDesirable Skills and Experience\u003c/strong\u003e\u003c/div\u003e \u003cdiv\u003e\u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003ePrevious experience working in a Security Operations Centre (SOC) or MSSP environment.\u003c/div\u003e \u003cdiv\u003e\u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u003c/span\u003eHands-on experience with SIEM and SOAR platforms such as Microsoft Sentinel, Splunk, Cortex XSOAR, Tines etc.\u003c/div\u003e \u003cdiv\u003e\u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003eCloud platform experience (AWS, Azure or GCP) and containerisation (Docker, Kubernetes).\u003c/div\u003e \u003cdiv\u003e\u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u003c/span\u003eFamiliarity with Australian security frameworks and guidance such as the ACSC Essential Eight and Information Security Manual, and with ISO 27001 or NIST.\u003c/div\u003e \u003cdiv\u003e\u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003eDetection-as-code practices and version-controlled security content.\u003c/div\u003e \u003cdiv\u003e\u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003eRelevant certifications or study, for example a degree in IT, cyber security or software engineering, Terraform Associate, Microsoft SC-200 or AZ-500, AWS/Azure/GCP associate certifications, or Security+.\u003c/div\u003e \u003cbr\u003e \u003cdiv\u003e\u003cstrong\u003ePersonal Attributes\u003c/strong\u003e\u003c/div\u003e \u003cdiv\u003e\u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eCurious, self-directed and eager to learn quickly.\u003c/div\u003e \u003cdiv\u003e\u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp;\u0026nbsp;\u003c/span\u003ePragmatic problem solver who is comfortable shipping iteratively.\u003c/div\u003e \u003cdiv\u003e\u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eCollaborative, with a service mindset toward analysts and clients.\u003c/div\u003e \u003cdiv\u003e\u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eAttention to detail and a strong sense of ownership.\u003c/div\u003e \u003cdiv\u003e\u0026bull;\u003cspan style=\"font-style:normal\"\u003e\u0026nbsp; \u003c/span\u003eCalm and organised under pressure.\u003c/div\u003e \u003cbr\u003e \u0026nbsp;\u003cbr\u003e \u0026nbsp; \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"935649\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "