Top Cyber Security Jobs in Sydney

Implements, operates, and improves enterprise security controls across identity, endpoints, cloud, SaaS, networks, and data. Builds automation using scripts, APIs, infrastructure-as-code, and CI/CD security checks. Supports IAM, endpoint protection, DLP, vendor risk assessments, physical access integrations, incident troubleshooting, and security operations. Partners with engineering, IT, legal, privacy, and business teams to deploy secure baselines, remediate risks, monitor control health, and improve enterprise security capabilities.

Implements and operates enterprise security controls across identity, endpoints, cloud, SaaS, networks, and data. Automates security workflows using scripts, APIs, infrastructure as code, and CI/CD checks. Maintains IAM, endpoint protection, DLP, device posture, and secure configuration baselines. Supports vendor risk reviews, insider-risk monitoring, physical access integrations, incident troubleshooting, on-call operations, documentation, and remediation of security gaps across corporate technology environments.

Lead complex technology transformation projects from initiation through implementation. Manage plans, budgets, resources, risks, dependencies, governance, vendors, and executive reporting while coordinating technology, business, architecture, data, and infrastructure teams. Oversee solution delivery, integration, testing, releases, and operational transition using Agile, Waterfall, or hybrid methodologies. Translate technical information into commercial and operational impacts and ensure alignment with strategic objectives and organisational standards.

Leads Snap’s Detection and Response team, owning security monitoring initiatives, investigation tooling, automation, incident triage, and response operations. The manager prioritizes long-term security outcomes, collaborates across teams during incidents, guides strategic planning, develops team members, manages performance, and recruits security engineers. The role requires expertise in detection and response, operating system internals, cloud platforms, threat intelligence, and automation.

Assess customers’ Falcon environments, identify security misalignments, recommend remediation, and guide customers toward improved security posture. The role documents and resolves issues within SLAs, produces service reports, coordinates troubleshooting with support and internal teams, and maintains customer satisfaction. Candidates need cybersecurity experience, strong customer communication, Windows/Linux/macOS knowledge, and threat detection or incident response expertise.

Build and maintain large-scale security systems, develop automation and detection engineering capabilities, investigate alerts and incidents, perform digital forensics and malware analysis, lead incident response, and participate in red team exercises. The role requires collaboration with global teams and expertise across operating systems, cloud infrastructure, threat detection, threat hunting, and incident response.

Investigate and respond to cybersecurity alerts and hands-on intrusions in a managed SOC. Analyze EDR and SIEM telemetry, logs, forensic artifacts, malware, Microsoft 365, and Google Workspace activity. Provide remediation guidance, tune detections, support escalations, and collaborate with Product and Engineering teams to improve MDR capabilities and security workflows.

Lead end-to-end security incident response across GitLab’s cloud and corporate environments in the APAC region. Investigate complex incidents using DFIR methods, develop SIEM and detection capabilities, build automation and AI-assisted workflows, conduct root cause analysis, maintain response documentation, coordinate executive communications, and mentor engineers within a global 24/7 SIRT.

Own and grow Datadog’s strategic cloud security channel partnerships across APAC. Responsibilities include recruiting and onboarding partners, driving partner-sourced revenue, enabling joint selling, negotiating agreements, coordinating technical and marketing launches, conducting business reviews, and developing partner-led solutions. The role requires quota-carrying cybersecurity or cloud security SaaS experience, familiarity with cloud hyperscalers, strong technical communication skills, and 30–40% travel.

Provides strategic technology leadership and executive advisory to enterprise clients. Reviews solution engagements, develops fit-for-purpose technology concepts and designs, owns multi-year technology roadmaps and end-of-life strategies, and advises CIOs and senior technology leaders. The role requires broad expertise across infrastructure, cloud, security, business applications, and enterprise architecture, along with mentoring and talent development responsibilities.

Lead pre-sales security operations engagements across APJ by designing, configuring, and demonstrating ServiceNow Security Operations solutions. Develop integrated workflows using Armis asset intelligence, Veza identity governance, and ServiceNow incident response, threat intelligence, and vulnerability response. Advise customers, support sales campaigns and marketing events, maintain demonstration environments, collaborate with product and development teams, and share best practices. Explain security operations strategies, attack vectors, frameworks, and competitive differentiators to enterprise customers.

Advise higher education institutions on digital transformation, shaping AI, cloud and security strategies. Build executive relationships, identify strategic opportunities, lead complex, multidisciplinary engagements, facilitate workshops, and scale solutions across institutions and the region.

Detect and respond to security incidents across GitLab’s 24/7 global rotation, managing events from detection through recovery. Maintain incident response runbooks, conduct root-cause and lessons-learned reviews, automate security processes, improve detection capabilities, investigate cloud threats and infected hosts, and collaborate across teams on security projects and tooling.

Help customers understand Cribl’s value during the sales process, deliver product demonstrations, answer technical questions, support proof-of-concept sessions, and document customer use cases. The role requires familiarity with logs, metrics, IT operations, and security, along with strong English communication, remote-work experience, and willingness to travel across Australia and APAC.

Drive new-logo acquisition across the APJ territory by identifying, qualifying, and closing enterprise sales opportunities. Develop account and territory plans, manage pipeline forecasts, exceed revenue targets, and evangelize SaaS security technology to F1000 accounts. Build relationships with IT security and business executives, collaborate with partners and internal sales resources, manage proof-of-value processes, and maintain competitive and market knowledge.

Own technical direction and execution for major products and engineering initiatives. Design scalable systems across backend, frontend, APIs, databases, and infrastructure; write code; lead architecture decisions; solve production problems; improve engineering quality; and mentor engineers across teams. The role requires hands-on software engineering leadership in a distributed, global organization.

Lead enterprise implementation of secure code scanning platforms across the SDLC. Integrate scanning tools with GitHub, GitLab, and CI/CD pipelines; establish security policies, quality gates, vulnerability management, remediation workflows, and governance processes. Support rollout and stabilization while mentoring development teams on secure coding practices and collaborating with DevOps and security stakeholders.

Supports secure coding and application security transformation initiatives by gathering requirements, defining standards and governance, documenting workflows, integrating security controls into SDLC and CI/CD pipelines, and supporting UAT, training, rollout, and change management for secure code scanning platforms.

Performs advanced security monitoring, threat hunting, incident detection and response, malware and network forensics, SIEM tuning, security tool configuration, and client reporting within a 24/7 global Cyber Defense Centre. The role handles security incidents end to end, supports major incident escalations, improves detection and response processes, recommends client system changes, documents best practices, and identifies automation opportunities.

Own technical direction and execution for major products and systems. Design scalable, reliable architectures across backend, frontend, APIs, databases, and infrastructure while remaining hands-on with coding, prototyping, reviews, debugging, and production support. Lead architecture decisions, resolve complex engineering problems, improve quality and development practices, drive critical initiatives from design to production, and mentor engineers across distributed international teams.

Lead technical direction and hands-on execution for major products and systems. Design scalable backend, frontend, API, database, and infrastructure solutions; write and review code; make architecture trade-offs; solve production issues; improve engineering quality; lead critical initiatives; and mentor engineers across distributed international teams.

Owns technical direction and hands-on execution for major products and systems. Designs scalable, reliable architectures across backend, frontend, APIs, databases, and infrastructure; writes code; leads critical initiatives from design through production; makes technical trade-offs; improves engineering quality; solves complex production problems; and mentors engineers across teams.

Leads complex, strategic sales pursuits for large Australian service provider customers, managing opportunities from qualification through closure. Coordinates account teams, product, software, services, finance, legal, and sales leadership. Develops sales strategy, technical and commercial proposals, business value analyses, and deal structures while engaging executive stakeholders. Oversees pursuit governance, cadence, escalation management, competitive analysis, and pipeline insights. Shares best practices across the regional service provider sales community.

Designs and supports network security infrastructure as a firewall engineer, performs remediation work, and uses DevOps tools including Bitbucket, Jenkins, JIRA, GitHub, Terraform, and Vault. The role requires at least six years of experience.

Implement and operate the runZero security platform across enterprise environments. Responsibilities include platform configuration, asset discovery, integrations with security and infrastructure systems, API-based automation, workflow engineering, SRE practices, monitoring, access control, recovery planning, and compliance with security, privacy, and regulatory requirements.