Top Cyber Security Jobs in Sydney

Leads Snap’s Detection and Response team, owning security monitoring initiatives, investigation tooling, automation, incident triage, and response operations. The manager prioritizes long-term security outcomes, collaborates across teams during incidents, guides strategic planning, develops team members, manages performance, and recruits security engineers. The role requires expertise in detection and response, operating system internals, cloud platforms, threat intelligence, and automation.

Build and maintain large-scale security systems, develop automation and detection engineering capabilities, investigate alerts and incidents, perform digital forensics and malware analysis, lead incident response, and participate in red team exercises. The role requires collaboration with global teams and expertise across operating systems, cloud infrastructure, threat detection, threat hunting, and incident response.

Lead engineer responsible for designing, developing, and maintaining secure, scalable payments production systems. Owns production troubleshooting, automation of recurring issues, code development and review, vendor evaluations, and driving engineering best practices across teams to improve operational stability.

Investigate and respond to cybersecurity alerts and hands-on intrusions in a managed SOC. Analyze EDR and SIEM telemetry, logs, forensic artifacts, malware, Microsoft 365, and Google Workspace activity. Provide remediation guidance, tune detections, support escalations, and collaborate with Product and Engineering teams to improve MDR capabilities and security workflows.

Lead end-to-end security incident response across GitLab’s cloud and corporate environments in the APAC region. Investigate complex incidents using DFIR methods, develop SIEM and detection capabilities, build automation and AI-assisted workflows, conduct root cause analysis, maintain response documentation, coordinate executive communications, and mentor engineers within a global 24/7 SIRT.

Own and grow Datadog’s strategic cloud security channel partnerships across APAC. Responsibilities include recruiting and onboarding partners, driving partner-sourced revenue, enabling joint selling, negotiating agreements, coordinating technical and marketing launches, conducting business reviews, and developing partner-led solutions. The role requires quota-carrying cybersecurity or cloud security SaaS experience, familiarity with cloud hyperscalers, strong technical communication skills, and 30–40% travel.

Provides strategic technology leadership and executive advisory to enterprise clients. Reviews solution engagements, develops fit-for-purpose technology concepts and designs, owns multi-year technology roadmaps and end-of-life strategies, and advises CIOs and senior technology leaders. The role requires broad expertise across infrastructure, cloud, security, business applications, and enterprise architecture, along with mentoring and talent development responsibilities.

Lead pre-sales security operations engagements across APJ by designing, configuring, and demonstrating ServiceNow Security Operations solutions. Develop integrated workflows using Armis asset intelligence, Veza identity governance, and ServiceNow incident response, threat intelligence, and vulnerability response. Advise customers, support sales campaigns and marketing events, maintain demonstration environments, collaborate with product and development teams, and share best practices. Explain security operations strategies, attack vectors, frameworks, and competitive differentiators to enterprise customers.

Advise higher education institutions on digital transformation, shaping AI, cloud and security strategies. Build executive relationships, identify strategic opportunities, lead complex, multidisciplinary engagements, facilitate workshops, and scale solutions across institutions and the region.

Detect and respond to security incidents across GitLab’s 24/7 global rotation, managing events from detection through recovery. Maintain incident response runbooks, conduct root-cause and lessons-learned reviews, automate security processes, improve detection capabilities, investigate cloud threats and infected hosts, and collaborate across teams on security projects and tooling.

Develop and execute acquisition strategies to generate net-new customer growth across Australia. Prospect strategically, identify greenfield opportunities, manage opportunities through the full sales cycle, and close new business. Collaborate with specialists, Solutions Engineers, and channel partners while using AI-powered sales tools and market insights. Maintain pipeline discipline, accurate forecasting, operational excellence, and consistent quota attainment.

Help customers understand Cribl’s value during the sales process, deliver product demonstrations, answer technical questions, support proof-of-concept sessions, and document customer use cases. The role requires familiarity with logs, metrics, IT operations, and security, along with strong English communication, remote-work experience, and willingness to travel across Australia and APAC.

Own technical direction and execution for major products and engineering initiatives. Design scalable systems across backend, frontend, APIs, databases, and infrastructure; write code; lead architecture decisions; solve production problems; improve engineering quality; and mentor engineers across teams. The role requires hands-on software engineering leadership in a distributed, global organization.

Own technical direction and execution for major products and systems. Design scalable, reliable architectures across backend, frontend, APIs, databases, and infrastructure while remaining hands-on with coding, prototyping, reviews, debugging, and production support. Lead architecture decisions, resolve complex engineering problems, improve quality and development practices, drive critical initiatives from design to production, and mentor engineers across distributed international teams.

Lead technical direction and hands-on execution for major products and systems. Design scalable backend, frontend, API, database, and infrastructure solutions; write and review code; make architecture trade-offs; solve production issues; improve engineering quality; lead critical initiatives; and mentor engineers across distributed international teams.

Owns technical direction and hands-on execution for major products and systems. Designs scalable, reliable architectures across backend, frontend, APIs, databases, and infrastructure; writes code; leads critical initiatives from design through production; makes technical trade-offs; improves engineering quality; solves complex production problems; and mentors engineers across teams.

Leads complex, strategic sales pursuits for large Australian service provider customers, managing opportunities from qualification through closure. Coordinates account teams, product, software, services, finance, legal, and sales leadership. Develops sales strategy, technical and commercial proposals, business value analyses, and deal structures while engaging executive stakeholders. Oversees pursuit governance, cadence, escalation management, competitive analysis, and pipeline insights. Shares best practices across the regional service provider sales community.

Design, implement, test, and administer SAP security solutions across on-premise and cloud environments. Lead complex security projects including role redesigns, S/4HANA conversions, upgrades, RISE migrations, Fiori security implementations, and greenfield designs. Advise on SAP security architecture, access provisioning, GRC, BTP security, and business process alignment. Resolve access issues, manage audits, document solutions, and provide expert guidance throughout project and operational lifecycles.

Lead product security and incident response efforts: design and deploy security controls, hunt and investigate threats using endpoint/network/cloud telemetry, build detections and workflows, perform forensics, and partner with engineering to remediate vulnerabilities and improve secure design.

Lead security monitoring, threat hunting, incident response, vulnerability assessment, and remediation across enterprise environments. Investigate alerts and breaches, coordinate containment and recovery, improve detection rules and operational processes, maintain security playbooks, and provide threat- and risk-based recommendations. The role also involves root-cause analysis, reporting, security metrics, stakeholder communication, and acting as a senior escalation point for complex security issues.

Conducts threat intelligence analysis for internal and customer-facing investigations. Supports attribution and actor modeling, analyzes adversary infrastructure and tactics, develops emerging threat clusters, and applies cloud, identity, endpoint, log, and network telemetry. Provides intelligence support to incident response teams, improves Microsoft products based on observed exploitation, briefs technical and executive stakeholders, and feeds investigation findings into threat actor tracking efforts.

Provide cloud security support across AWS platforms, remediate vulnerabilities and misconfigurations, automate security controls, and strengthen secure CI/CD pipelines. Coordinate remediation with platform and workload teams, define preventative guardrails and secure patterns, support cloud security operations and incident response, and manage risk exemptions, approvals, compensating controls, and audit evidence.

Lead application security assessments across web applications, APIs, and cloud services. Embed threat modelling, secure-by-design, secure SDLC, and DevSecOps practices; manage vulnerabilities and security tooling; coordinate penetration testing; develop standards and guardrails; educate developers; support incident investigations; and report application security risks and remediation progress.

Analyze external attack surface data across IPs, domains, cloud services, VPNs, and infrastructure. Consolidate and normalize discovery datasets, reconcile assets with internal inventories, map ownership, assess vulnerabilities and business risk, and prioritize remediation. The role also develops treatment recommendations, maintains audit-ready governance records, engages technical stakeholders, and reports exposure trends and systemic control issues to cybersecurity leadership.

Performs penetration testing, secure configuration reviews, and technical security assessments across web, mobile, network, cloud, and application environments. Determines testing scope and acceptance criteria, executes security tests, analyzes results, and provides recommendations. Collaborates with development and operations teams, supports security training, and advises clients on improving their security posture. The role is customer-facing, varied, and may involve short-term travel or remote work.