Senior Cyber Security Engineer

• Deliver cyber engineering services that protect business operations and align with risk appetite, safety requirements, and regulatory obligations.
• Partner with Operations, IT, Networks, Projects, and Engineering to ensure controls are practical, sustainable, and enable reliable system performance.
• Translate regulatory, CI Act, and AESCSF requirements into actionable engineering activities.
• Provide expert, influential advice on complex security issues, including OT/IT convergence, vendor access, remote support, and safety-critical industrial environments.

Cyber Security Engineering

• Design, implement, and support security controls across IT, OT, AI and IoT systems.
• Deploy and manage technologies such as firewalls, SASE/SSE, EDR/XDR, SIEM/SOAR, IAM, encryption, and industrial security platforms.
• Implement secure network segmentation across OT environments, including DMZs, Zone/Conduit models, and vendor remote access models.
• Embed DevSecOps practices into CI/CD pipelines, including SCA, SAST/DAST, secrets management, and build pipeline hardening.
• Use automation (IaC, policy-as-code, configuration compliance tools) to maintain secure baselines.
• Oversee delivery of secure engineering outcomes for projects, maintenance activities, and system upgrades.

Risk Management & Compliance

• Perform risk assessments, threat modelling, vulnerability analysis, and configuration compliance reviews.
• Support uplift of AESCSF maturity and compliance with ISA/IEC 62443, NIST CSF, ASD Essential 8, and CI Act obligations.
• Identify control gaps and work with Technology and Engineering teams to implement mitigations.
• Maintain documentation, standards, patterns, and OT system security baselines.

Incident Response & Resilience

• Participate in the Cyber Security Incident Response Team (CSIRT) as an Incident Handler.
• Support IR activities across IT and OT environments, including containment, forensics and recovery.
• Maintain IR playbooks and contribute to tabletop and purple-team exercises.
• Provide out-of-hours support for critical cyber or operational incidents.

Threat Intelligence Integration

• Integrate internal and external threat intelligence into engineering, monitoring, and IR processes.
• Track OT/ICS threat trends (e.g., ransomware targeting manufacturing, ICS-specific malware).
• Use TI insights to shape architecture decisions, vulnerability management and control prioritisation.

Architecture Support

• Contribute to development of cyber security architecture patterns for IT, OT, IoT, and Cloud.
• Support design reviews and key design decision processes.
• Ensure engineering solutions align with enterprise architecture and secure-by-design principles.

Continuous Improvement

• Identify automation opportunities and improve efficiency of control implementation, monitoring and incident response.
• Stay current with evolving threats, emerging technologies, and best practices in ICS and enterprise cyber security.
• Drive uplift of cyber engineering processes, runbooks, standards, and asset security practices.
• Contribute to the Cyber Safety Program and broader security uplift initiatives.

• Bachelor’s degree in cyber security, IT, engineering or related field.
• Industry certification (e.g., CISSP or equivalent).
• Minimum 6+ years’ experience in cyber security engineering roles across IT and/or OT environments.
• Demonstrated experience with AESCSF, ISA/IEC 62443, ASD Essential 8 or NIST frameworks.
• Hands-on experience working within OT/ICS environments (SCADA, DCS, PLCs, industrial networks, safety systems).
• Experience delivering security outcomes across distributed industrial sites or critical infrastructure.

• Excellent knowledge of cyber security principles, management frameworks, and practices, particularly relating to OT.
• Experience with application whitelisting, SASE, firewalls, proxy, email filtering, anti-malware, DLP, cloud platforms, and other security technologies.
• Familiarity with DevSecOps, automation, and orchestration tools.
• Familiarity and experience with Data protection and classification
• Experience with vulnerability management/scanning, web application security, API security, Zero Trust, PAM, NDR, UEBA, and network-based encryption.
• Proficiency with Microsoft (Azure, O365), Linux (Red Hat), and mobile platforms (iPhone & Android).

Soft Skills

• Strong communication and stakeholder engagement skills.
• Excellent analytical and organizational skills.
• Ability to identify, assess, and communicate cyber security risks.

Leadership

• Experience providing thought leadership or mentoring within a cyber security context