Senior Security Engineer

Scyne Advisory • Full-time • Melbourne, Victoria, Australia • 6d ago

Company Description

Scyne are public purpose specialists uniting people, ideas and potential to shape solutions.

Our vision is to be the public purpose specialists, supporting organisations to build more resilient, secure, equitable and prosperous communities. We strive to support a stronger Australia – one purpose, one practice.

We are an independent, contemporary, national business with the scale and capabilities to deliver meaningful impact for the public purpose; through serving the public sector, public purpose organisations or projects, and organisations operating in defined public purpose sectors.

We are setting a new standard for public purpose advisory services in Australia, with rigorous governance and accountability frameworks and standards and a clear commitment to ethical leadership. We are governed by a Board including an independent Chair, a staff appointed director and two additional non-executive independent directors alongside two directors from the majority shareholder.

Job Description

The Senior Security Engineer is a hands-on technical specialist responsible for designing, implementing and improving cyber security controls across Scyne's technology environment. The role provides technical leadership across cloud security, identity, network, endpoint, detection engineering, automation and security operations, while working closely with CISO to reduce cyber risk and strengthen security capability.

Key responsibilities:

Cloud & Infrastructure Security Engineering: Design, implement and continuously improve security controls across Scyne environments, ensuring consistent policy enforcement and security standards.
Technical Security Operations & Incident Response: Serve as a technical escalation lead for complex investigations, detection engineering (including detection-as-code), vulnerability management, and threat-informed hardening using frameworks like MITRE ATT&CK.
Security Automation & Continuous Improvement: Drive operational efficiency and continuous assurance by automating security controls, embedding security into engineering practices, and delivering measurable improvements in security effectiveness.
Emerging Tech & AI Security Guardrails: Assess and mitigate AI and emerging technology risks through secure design, governance guardrails, data protection controls, and ongoing oversight.
Stakeholder Engagement & Advisory: Build trusted relationships with business and technology stakeholders to deliver practical, risk-based security advice that supports organisational outcomes and aligns with the security roadmap.
Capability & Continuous Development: Support the growth of Scyne's security capability by mentoring team members, evaluating emerging technologies, and collaborating with the CISO to deliver strategic security initiatives.
Data protection & Security Architecture - Strengthen data protection and secure-by-design outcomes through technical security controls, architecture assurance, identity and access governance, and risk-based security engineering.

Qualifications

Essential Experience and Qualifications

5+ years’ experience in security engineering, including practical cloud security experience in at least one major cloud platform, ideally Azure, AWS, or GCP.
Hands-on experience with threat detection and response, security monitoring, or cloud data protection in a production environment.
Strong documentation, communication, stakeholder engagement, and vendor/service-provider management skills.
Proficiency with infrastructure-as-code and security automation (Terraform, Python, PowerShell, or similar).
Solid understanding of cloud-native identity, networking, and logging/telemetry.
Practical exposure to SIEM/SOAR, EDR/XDR, alert tuning, telemetry onboarding, or incident response processes.
Working knowledge of common security frameworks or benchmarks such as NIST CSF, CIS Controls, ISO 27001, Essential Eight, or cloud provider security guidance.

Desirable Experience and Qualifications

Experience integrating or evaluating AI or LLM-based tools within operational or security workflows.
Experience building detection-as-code pipelines or threat-informed defence programs.
Familiarity with CSPM, CNAPP, DevSecOps or cloud-native security tooling.
Exposure to securing containers, APIs, SaaS platforms or CI/CD pipelines.
Exposure to data protection, DLP, privileged access management, secrets management, certificates or key management.
Relevant security certifications such as CISSP, Azure Security, AWS Security, GCP Security or equivalent are beneficial but not mandatory.

Additional Information

Benefits

Market leading Parental Leave: Allows either carer to take 26 weeks of leave, flexibly, until a child is two years of age. A six-month minimum service requirement for new starters applies. We also make full superannuation contributions for up to 12 months (including unpaid parental leave).
Flexible working: Our people have the autonomy to choose where and when they work so they can integrate their professional and personal lives, finding the right balance that fuels their growth, wellbeing, engagement and productivity. If it works for them, their teams, and their clients, it works for us.
Additional leave: Includes Birthday leave, First Nations Cultural Leave, Floating Public Holidays, Leave+ (purchased leave up to 12 weeks), Study Leave, Volunteering Leave, and more!
Smart device reimbursement: Working flexibly means accessing the information you need on the go. That’s why we help pay for your smartphone or tablet, claiming up to $60 a month towards your bill.
Wellness and Lifestyle benefits: We’ll give you $295 a year to spend on items or activities that support your wellness, and up to $205 a year to support your balanced lifestyle.
Sonder: A digital care platform that empowers people to actively take control of their wellbeing to live well and perform at their best, free to Scyne Employees and their immediate family members.

We value every person and every voice

We are committed to fostering, cultivating, and promoting a culture of diversity, equity and inclusion. We know that an inclusive culture improves the decision-making processes and is critical to delivering exceptional outcomes for our clients and team. We encourage applications from those in marginalised and/or historically underrepresented communities within our workforce. Additionally, if you require any adjustments to the process, please let us know.

Interested in working together or want to find out more?

If you're collaborative in nature, curious and keen to work in a high-performing team to drive meaningful change for clients, then you should apply today.

We Value Every Person and Every Voice:

We are committed to fostering, cultivating, and promoting a culture of diversity, equity and inclusion.

We are passionate about improving outcomes with First Peoples, working in collaboration with government and community sectors towards programs which focus on First Nations clients, consumers and communities. We recognise the knowledge, insights and capabilities of First Peoples. Their strength, resilience and cultural competence are highly valued.

We know that an inclusive culture, and collective intelligence improves the decision-making processes and is critical to delivering exceptional outcomes for our clients and team. We encourage applications from those in marginalised and/or historically underrepresented communities within our workforce. Additionally, if you require any adjustments to the process, please let us know.

Recruitment and Assessment Process:

Scyne’s approach to recruitment and selection is underpinned by key principles and expectations, ensuring we recruit and onboard a skilled and diverse workforce that is representative of the communities and organisations we serve. We ensure selection to roles is fair, with equal access provided, and appointments factor in but not limited to relative ability to fulfil the role, prior performance, potential and alignment with our values – taking unique experiences, perspectives, and contributions into consideration.

We Value Every Person and Every Voice:

We are committed to fostering, cultivating, and promoting a culture of diversity, equity and inclusion.

Recruitment and Assessment Process:

We carry out background checks on our people to ensure we have made a sound hiring decision and to protect the organisation and our clients from potential risk. If required, confirmation of a valid Commonwealth security clearance or the ability to obtain a Commonwealth security clearance.

At Scyne, we deeply value our recruitment partnerships. To ensure a clear and efficient process, we kindly request that all candidate submissions from search firms and recruiters are only made in alignment with a pre-existing, signed agreement for a specific position. Please note that any resumes submitted to Scyne for this position on an unsolicited basis, without a prior agreement, will not create any financial obligation for us. Consequently, we will not be liable for any fees or commissions should an unsolicited candidate be engaged, regardless of any conflicting terms or conditions you may have.

Practice: Chief Risk OfficeJob Location: MelbourneEmployment Type: Permanent Full TimeSecurity Clearance: Ability to obtainSub Practice: Risk & Quality