Senior Cyber Security Engineer

Division: Digital

Department: Cyber & Security

Reference number: 12651

Engagement type: Permanent

This is a Permanent Full-Time position based in Mel/Syd/Brisbane/Adelaide/Perth.
AEMO at the Heart of Energy
AEMO is Australia's independent energy system and market operator and system planner. AEMO's purpose is to ensure safe, reliable and affordable energy today, and enable the energy transition for the benefit of all Australians. Australian governments are now committed to a net zero economy for Australia by 2050 and our vision is to enable this.

We have the once-in-a-lifetime opportunity to co-design the future of our energy systems, and our core values revolve around
character, commitment, and connection
.

Join us as we contribute to this significant transition in the energy sector

About The Team & The Position
The objective of this role is to drive continuous improvements in protective security controls, lead the design and implementation of cyber security engineering solutions, collaborate with cross-functional teams to integrate security best practices. This position is critical for maintaining AEMO's cybersecurity infrastructure, ensuring compliance with industry standards and providing strategic planning and leadership.

The Senior Cyber Security Engineer assists in the uplift of the Cyber Threat and Operations capability and maturity to support the cyber security strategy at AEMO. This includes build, deploy and support solutions and systems within the cyber threat operations team.

Position Responsibilities

• Drive and provide technical input to cybersecurity projects, ensuring they are completed with the optimal security controls.
• Formulate and implement comprehensive solutions in line with cybersecurity strategy and policy.
• Drive the implementation of robust security controls to protect AEMO's IT systems and data.
• Design and provide technical guidance to logging mechanisms to ensure comprehensive monitoring and visibility of security events across AEMO's technology stack.
• Ensure security measures comply with industry standards and best practice as defined by the AESCSF, ISM and Essential
• Work closely with other Digital teams, Legal, Governance and Compliance, Architecture and other departments to ensure cohesive approach to security.
• Develop solutions to meet any capability gaps through the use of commercial, open source or self-developed technology.
• Develop new capabilities where automation or tooling is required to improve workflow. Document designs, processes and procedures for cyber operations systems and tooling.
• Contribute to the operation and improvement of the cyber threat capability, including people process and technology.

Position Requirements
Skills & Experience:

• Proven experience in working with endpoint detection and response (EDR) - Deployment, Configuration, tuning and managing alerts and dashboards.
• Experience working with Security Information and Event Management (SIEM) technologies, event logging and normalisation technologies.
• Adept in administering Windows and Linux systems in large enterprise environments
• Experience with Networking - Proxies, Firewalls, NDR's, IDS's, TAPs, DHCP, DNS, TCP/IP, Full Packet Capture.
• Knowledge of Forensic Security Tools - Velociraptor, F-Response, Crowdstrike. Knowledge of Vulnerability Tools - Tenable, Alsid, AssetNote
• Experience with Cloud environments - Microsoft Azure, Microsoft 365 Security, Microsoft Entra, GCP.
• Experience with Telemetry and Log forwarding - MMA/AMA/ARC & DCR's, Cribl, SysMon, TCP/UDP Protocols.
• Experience with Endpoint and user management tools - XDR, M/O365, SCCM, Intune, Ansible, Active Directory, Entra.
• Knowledge of Email security controls - Protection gateways, Microsoft Exchange, Outlook Integrations.
• Knowledge of security frameworks - NIST, ISM, AESCSF and Essential 8.
• Experience and demonstrated knowledge of ITIL ITSM and Agile framework set of best practices.

Must be an Australian citizen with the ability to attain and maintain an appropriate level of national security clearance.
Education/ Professional Certifications

• Tertiary and/or postgraduate in engineering, Computer science, mathematics, science, information technology or a similar analytical discipline desirable.
• Relevant certifications in Cyber security, Program Management/any other relevant disciplines

In Return Some Of Our Benefits To You

• Flexible working: work from home, part time, job share, hybrid options, and additional leave options
• Professional development via projects, industry networks, job rotation, study assistance and more.
• Give back with up to 4 days of volunteering leave per year.
• Reward your hard work with annual performance bonuses (subject to eligibility).
• Embrace a healthier you with our wellness program, discounted health insurance, gym perks and our comprehensive Employee Assistance Program (EAP).

About Our Process
At AEMO we are committed to creating a diverse and inclusive workforce. We welcome people of all backgrounds, including people with disabilities and neurodivergence and those who identify as Aboriginal and/or Torres Strait Islander.

If you have any accessibility requirements to support you during the application or interview process, simply let us know by emailing us