Top Cyber Security Jobs in Sydney

Lead engineer responsible for designing, developing, and maintaining secure, scalable payments production systems. Owns production troubleshooting, automation of recurring issues, code development and review, vendor evaluations, and driving engineering best practices across teams to improve operational stability.

Build and deploy production software and configurations within a strategic customer’s engineering organization using Cloudflare’s platform. Own technical success, participate in engineering rituals and incident response, drive platform adoption, influence product direction, and maintain relationships with senior technical leaders. The role requires broad full-stack and cloud expertise, operational maturity, systems-design ability, and regular on-site customer collaboration.

Build and maintain large-scale security systems, develop automation and detection engineering capabilities, investigate alerts and incidents, perform digital forensics and malware analysis, lead incident response, and participate in red team exercises. The role requires collaboration with global teams and expertise across operating systems, cloud infrastructure, threat detection, threat hunting, and incident response.

As a Threat Intelligence Security Engineer, you will analyze threats, develop detection systems, and lead incident response efforts to protect Snap's infrastructure.

Leads Snap’s Detection and Response team, owning security monitoring initiatives, investigation tooling, automation, incident triage, and response operations. The manager prioritizes long-term security outcomes, collaborates across teams during incidents, guides strategic planning, develops team members, manages performance, and recruits security engineers. The role requires expertise in detection and response, operating system internals, cloud platforms, threat intelligence, and automation.

Manage APAC safety and physical security operations, including investigations, compliance, risk management, travel and event security, crisis response, emergency preparedness, vendor oversight, and incident management. Develop regional security policies, training, and strategic programs; coordinate with cross-functional teams, law enforcement, and executives; oversee security personnel, assessments, budgets, and tabletop exercises across global offices.

Lead OT security monitoring and triage, investigate suspicious activity across industrial networks, tune detections, manage vulnerabilities and asset classification, and escalate findings to threat hunters and incident responders. Mentor analysts, produce customer-facing reports, support hardening recommendations, and collaborate across cybersecurity teams. The role requires shift-based coverage, occasional weekend on-call work, and expertise in network security, security monitoring, and ICS/OT environments.

Implements, operates, and improves enterprise security controls across identity, endpoints, cloud, SaaS, networks, and data. Builds automation using scripts, APIs, infrastructure-as-code, and CI/CD security checks. Supports IAM, endpoint protection, DLP, vendor risk assessments, physical access integrations, incident troubleshooting, and security operations. Partners with engineering, IT, legal, privacy, and business teams to deploy secure baselines, remediate risks, monitor control health, and improve enterprise security capabilities.

Implements and operates enterprise security controls across identity, endpoints, cloud, SaaS, networks, and data. Automates security workflows using scripts, APIs, infrastructure as code, and CI/CD checks. Maintains IAM, endpoint protection, DLP, device posture, and secure configuration baselines. Supports vendor risk reviews, insider-risk monitoring, physical access integrations, incident troubleshooting, on-call operations, documentation, and remediation of security gaps across corporate technology environments.

Lead complex technology transformation projects from initiation through implementation. Manage plans, budgets, resources, risks, dependencies, governance, vendors, and executive reporting while coordinating technology, business, architecture, data, and infrastructure teams. Oversee solution delivery, integration, testing, releases, and operational transition using Agile, Waterfall, or hybrid methodologies. Translate technical information into commercial and operational impacts and ensure alignment with strategic objectives and organisational standards.

Supports customers and partners in designing, deploying, and adopting secure, scalable Azure cloud solutions involving data, analytics, AI, modern applications, automation, APIs, and security. Assists with technical presales, proof-of-concept engagements, architecture recommendations, customer outcomes, partner enablement, governance, risk mitigation, and solution adoption while developing expertise in Microsoft technologies and methodologies.

Assess customers’ Falcon environments, identify security misalignments, recommend remediation, and guide customers toward improved security posture. The role documents and resolves issues within SLAs, produces service reports, coordinates troubleshooting with support and internal teams, and maintains customer satisfaction. Candidates need cybersecurity experience, strong customer communication, Windows/Linux/macOS knowledge, and threat detection or incident response expertise.

Investigate and respond to cybersecurity alerts and hands-on intrusions in a managed SOC. Analyze EDR and SIEM telemetry, logs, forensic artifacts, malware, Microsoft 365, and Google Workspace activity. Provide remediation guidance, tune detections, support escalations, and collaborate with Product and Engineering teams to improve MDR capabilities and security workflows.

Lead end-to-end security incident response across GitLab’s cloud and corporate environments in the APAC region. Investigate complex incidents using DFIR methods, develop SIEM and detection capabilities, build automation and AI-assisted workflows, conduct root cause analysis, maintain response documentation, coordinate executive communications, and mentor engineers within a global 24/7 SIRT.

Own and grow Datadog’s strategic cloud security channel partnerships across APAC. Responsibilities include recruiting and onboarding partners, driving partner-sourced revenue, enabling joint selling, negotiating agreements, coordinating technical and marketing launches, conducting business reviews, and developing partner-led solutions. The role requires quota-carrying cybersecurity or cloud security SaaS experience, familiarity with cloud hyperscalers, strong technical communication skills, and 30–40% travel.

Provides strategic technology leadership and executive advisory to enterprise clients. Reviews solution engagements, develops fit-for-purpose technology concepts and designs, owns multi-year technology roadmaps and end-of-life strategies, and advises CIOs and senior technology leaders. The role requires broad expertise across infrastructure, cloud, security, business applications, and enterprise architecture, along with mentoring and talent development responsibilities.

Lead pre-sales security operations engagements across APJ by designing, configuring, and demonstrating ServiceNow Security Operations solutions. Develop integrated workflows using Armis asset intelligence, Veza identity governance, and ServiceNow incident response, threat intelligence, and vulnerability response. Advise customers, support sales campaigns and marketing events, maintain demonstration environments, collaborate with product and development teams, and share best practices. Explain security operations strategies, attack vectors, frameworks, and competitive differentiators to enterprise customers.

Advises government and industry clients on complex Defence and National Security challenges across infrastructure, asset management, program delivery, commercial strategy, supply chain and logistics. Responsibilities may include analysis, workstream leadership, client advisory, engagement management and team growth. Candidates should translate complex issues into actionable advice, work effectively amid ambiguity, build trusted relationships and deliver practical outcomes in high-stakes environments.

Implement and operate cloud and on-premises cybersecurity controls for datacenter infrastructure. Proactively identify, investigate, and mitigate security issues; install and maintain security hardware/software; create detections and incident response plans; recommend security policy improvements; collaborate with partner teams and participate in on-call rotation.

Serve as the technical bridge between Aikido Security and customers in Australia. Manage at-risk accounts, drive product adoption and value realization, onboard and deploy new clients, troubleshoot workflow issues, escalate complex problems, train customer teams, and share product feedback. The role requires AppSec expertise, strong technical debugging ability, proactive communication, independence, and the ability to manage multiple priorities.

Leads physical security and safety services across 15 Asia-Pacific markets. Responsibilities include security strategy, policy enforcement, geopolitical risk assessment, incident and crisis response, workplace violence prevention, regulatory compliance, stakeholder engagement, security systems oversight, vendor management, budgeting, and leadership of nine direct reports.

Detect and respond to security incidents across GitLab’s 24/7 global rotation, managing events from detection through recovery. Maintain incident response runbooks, conduct root-cause and lessons-learned reviews, automate security processes, improve detection capabilities, investigate cloud threats and infected hosts, and collaborate across teams on security projects and tooling.

Own the technical design and delivery of SAST/SCA capabilities across GitLab SaaS and Self-Managed environments. Assess CI/CD architecture, define scanning policies and secure coding standards, design vulnerability triage workflows, evaluate tooling, analyze recurring findings, approve rollout readiness, train developers, and document operational handoff. The role requires deep AppSec expertise, hands-on GitLab security scanning experience, secure software engineering knowledge, and strong stakeholder communication.

Maintains and implements physical security infrastructure across datacenters, including access control and video systems. Responsibilities include programming systems for new capacity, break/fix support, on-call response, health and compliance monitoring, lifecycle management, vendor coordination, and process improvements. The role collaborates with engineering, project management, design, security operations, and facilities teams to improve physical security outcomes.

Lead security architecture and technical sales engagements for Splunk’s security business across APJC. Advise CISOs and senior technical leaders on SIEM, threat detection, SOC transformation, and AI-driven security operations. Develop enterprise security architectures, lead competitive displacement campaigns, mentor regional technical teams, create enablement assets and reference designs, and communicate customer and market requirements to Cisco and Splunk product and engineering teams.