Cybersecurity Engineer (Dayshift - Hybrid in MOA)

The Cybersecurity Engineer is responsible for designing, implementing, and maintaining security solutions to protect Camp Australia’s digital assets and infrastructure. This role involves proactive threat detection, vulnerability management, incident response, and continuous improvement of security controls. The engineer works closely with IT, Cybersecurity GRC, and business teams to ensure the confidentiality, integrity, and availability of systems and data.

Key Responsibilities

• Security Controls:
• o Design and deploy security technologies including firewalls, IDS/IPS, endpoint protection, and SIEM systems.
• o Integrate security into cloud and on-premises infrastructure/applications.
• Vulnerability Management and Security Assessments:
• o Perform regular security assessments and audits to identify potential weaknesses.
• o Implement improvements and coordinate remediation efforts with relevant teams.
• Threat Monitoring, Detection, and Incident Response:
• o Continuously monitor Camp Australia's networks, systems, and security logs to detect vulnerabilities and respond to potential threats, investigating incidents and implementing corrective actions to mitigate risks.
• o Conduct root cause analysis and forensic investigations.
• o Occasional out-of-hours work may be required to support incident response or critical security activities.
• Security Automation & Tooling:
• o Develop scripts and automation to enhance security operations and incident response.
• Compliance & Audit Support
• o Ensure technical controls align with regulatory requirements.
• o Support audit activities and provide evidence of control effectiveness.
• Security Reporting:
• o Assist in preparing reports on security risk, metrics, compliance status, and incident response activities.
  

Qualifications & Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent practical experience).
• 6+ years of hands-on experience in cybersecurity engineering, infrastructure security, or security operations.
• Proven experience with security technologies such as firewalls, IDS/IPS, SIEM, endpoint protection, and cloud security tools.
• Strong understanding of network protocols, operating systems (Windows/Linux), and cloud platforms (AWS, Azure, or GCP).
• Experience with scripting or automation (e.g., Python, PowerShell, Bash).
• Certifications such as below are a plus:
• o Microsoft Certified: Azure Security Engineer Associate
• o Microsoft Certified: Cybersecurity Architect Expert
• o GIAC Security Engineer (GSE)
  

Technical Skills

• Experience implementing and administering security tools such as firewalls, intrusion detection systems, cloud security posture management, vulnerability management, SIEM, and endpoint detection and response tools.
• Strong understanding of network administration and security technologies.
• Proven Cloud Security Engineering experience with Azure.
• Experience with scripting languages (e.g., Python, PowerShell, Bash).
• Working knowledge of DevSecOps and experience with SCA, SAST, and DAST tools.
• Working knowledge of Cybersecurity/Information Security Frameworks such as NIST CSF, ISO27001, etc.
• Familiarity with using ticketing systems such as JIRA