Cyber Security Engineer @ Special Broadcasting Service

About Us

SBS is one of the world's most unique and innovative media organisations, producing trusted, meaningful, and engaging content that exists for all Australians to inspire, support and celebrate the diversity of our multicultural society.

Our purpose, for the last 50 years, has reflected and explored the evolving diversity of Australia, investing in initiatives to deepen its connections with communities, sharing their stories and giving a voice to those often unheard, with the aim of increasing understanding and respect of the differences that make up Australia.

SBS is a truly distinctive network, showcasing multicultural, multilingual and First Nations stories otherwise untold in the Australian media.

Please note:
As part of the hiring process, candidates will require to undergo a security background check.

The Department

SBS Technology can be thought of as the 'engine room' of SBS. Our primary role is to enable and support the production, distribution, and transmission of content across television, radio, and online platforms. Our teams achieve this by working collaboratively to design innovative solutions and deliver end-to-end services for our business stakeholders.

About The Role

The Cyber Security Engineer - Security Operations plays a key role in the design, deployment, automation, and ongoing management of security technologies across the organisation. This role will have you working across Elasticsearch SIEM, CrowdStrike EDR, Microsoft 365/EntraID security, AWS cloud security, and a range of interesting security uplift projects slated for now and the future.

The successful candidate will bring experience in supporting multiple cyber solutions concurrently, along with excellent communication skills and a keen interest in working across all facets of cyber security.

In addition to project delivery, this role includes hands-on involvement in security operations and alert response with participation in an emergency response on-call roster.

If you thrive on variety, love problem solving, and are keen to be a part of a small team invested in the cyber resilience of Australia's most trusted multilingual broadcaster, then this is your chance to make a difference.

Key Responsibilities

• Manage and deploy Elasticsearch SIEM components, Elastic Agent and security integrations including creating and tuning security detections, alerts, and dashboards.
• Manage, deploy and monitor CrowdStrike Falcon EDR, ensuring optimal security posture across endpoints.
• Manage and secure Microsoft 365, EntraID security features, including Defender for Office 365 and Conditional Access Policies.
• Take the lead in the design and deployment of cyber uplift projects across centralised endpoint management and identity and access management.
• Ensure Active Directory security is maintained and benchmarked against best practice initiatives.
• Monitor AWS security services such as GuardDuty, Security Hub, and CloudTrail for suspicious activity.
• Monitor and respond to security alerts and incidents.
• Support security risk assessments and contribute to vulnerability management efforts.
• Maintain and update security software documentation, incident playbooks, and response procedures.
• Leverage PowerShell, Python and Power Automate to streamline security response workflows.
• Act as a key technical resource for security improvements across the organisation.

About You

• Experience in a similar Engineering role with an analytical background.
• Proficiency in managing SIEM components (preferably Elasticsearch and Elastic Stack).
• Knowledge of security frameworks such as NIST, ASD Essential 8, and MITRE ATT&CK.
• Ability to work and troubleshoot independently and contribute to security automation projects.

Further Desirable Requirements

• Certification in Elasticsearch (Elastic Certified Engineer or Analyst).
• SANS GCFA (Certified Forensic Analyst) or similar security certification.
• Experience with network security and firewall management.
• Experience working in a Security Operations Centre (SOC) environment

Please consider applying even if you don't meet 100% of what's outlined

Key Responsibilities

• Managing and deploying Elasticsearch SIEM components
• Monitoring CrowdStrike Falcon EDR
• Leading cyber uplift projects

Key Strengths

• Proficiency in managing SIEM components
• Knowledge of security frameworks
• Certification in Elasticsearch
• SANS GCFA certification
• Experience with network security

Why Special Broadcasting Service (SBS) is partnering with Hatch on this role.
Hatch exists to level the playing field for people as they discover a career that's right for them. So when you apply you have the chance to show more than just your resume.

A Final Note: This is a role with Special Broadcasting Service (SBS) not with Hatch.