Top Cyber Security Jobs in Sydney

Build and deploy production software and configurations within a strategic customer’s engineering organization using Cloudflare’s platform. Own technical success, participate in engineering rituals and incident response, drive platform adoption, influence product direction, and maintain relationships with senior technical leaders. The role requires broad full-stack and cloud expertise, operational maturity, systems-design ability, and regular on-site customer collaboration.

Manage APAC safety and physical security operations, including investigations, compliance, risk management, travel and event security, crisis response, emergency preparedness, vendor oversight, and incident management. Develop regional security policies, training, and strategic programs; coordinate with cross-functional teams, law enforcement, and executives; oversee security personnel, assessments, budgets, and tabletop exercises across global offices.

Implements, operates, and improves enterprise security controls across identity, endpoints, cloud, SaaS, networks, and data. Builds automation using scripts, APIs, infrastructure-as-code, and CI/CD security checks. Supports IAM, endpoint protection, DLP, vendor risk assessments, physical access integrations, incident troubleshooting, and security operations. Partners with engineering, IT, legal, privacy, and business teams to deploy secure baselines, remediate risks, monitor control health, and improve enterprise security capabilities.

Implements and operates enterprise security controls across identity, endpoints, cloud, SaaS, networks, and data. Automates security workflows using scripts, APIs, infrastructure as code, and CI/CD checks. Maintains IAM, endpoint protection, DLP, device posture, and secure configuration baselines. Supports vendor risk reviews, insider-risk monitoring, physical access integrations, incident troubleshooting, on-call operations, documentation, and remediation of security gaps across corporate technology environments.

Lead complex technology transformation projects from initiation through implementation. Manage plans, budgets, resources, risks, dependencies, governance, vendors, and executive reporting while coordinating technology, business, architecture, data, and infrastructure teams. Oversee solution delivery, integration, testing, releases, and operational transition using Agile, Waterfall, or hybrid methodologies. Translate technical information into commercial and operational impacts and ensure alignment with strategic objectives and organisational standards.

Leads Snap’s Detection and Response team, owning security monitoring initiatives, investigation tooling, automation, incident triage, and response operations. The manager prioritizes long-term security outcomes, collaborates across teams during incidents, guides strategic planning, develops team members, manages performance, and recruits security engineers. The role requires expertise in detection and response, operating system internals, cloud platforms, threat intelligence, and automation.

Assess customers’ Falcon environments, identify security misalignments, recommend remediation, and guide customers toward improved security posture. The role documents and resolves issues within SLAs, produces service reports, coordinates troubleshooting with support and internal teams, and maintains customer satisfaction. Candidates need cybersecurity experience, strong customer communication, Windows/Linux/macOS knowledge, and threat detection or incident response expertise.

Build and maintain large-scale security systems, develop automation and detection engineering capabilities, investigate alerts and incidents, perform digital forensics and malware analysis, lead incident response, and participate in red team exercises. The role requires collaboration with global teams and expertise across operating systems, cloud infrastructure, threat detection, threat hunting, and incident response.

Supports customers and partners in designing, deploying, and adopting secure, scalable Azure cloud solutions involving data, analytics, AI, modern applications, automation, APIs, and security. Assists with technical presales, proof-of-concept engagements, architecture recommendations, customer outcomes, partner enablement, governance, risk mitigation, and solution adoption while developing expertise in Microsoft technologies and methodologies.

Investigate and respond to cybersecurity alerts and hands-on intrusions in a managed SOC. Analyze EDR and SIEM telemetry, logs, forensic artifacts, malware, Microsoft 365, and Google Workspace activity. Provide remediation guidance, tune detections, support escalations, and collaborate with Product and Engineering teams to improve MDR capabilities and security workflows.

Lead end-to-end security incident response across GitLab’s cloud and corporate environments in the APAC region. Investigate complex incidents using DFIR methods, develop SIEM and detection capabilities, build automation and AI-assisted workflows, conduct root cause analysis, maintain response documentation, coordinate executive communications, and mentor engineers within a global 24/7 SIRT.

Own and grow Datadog’s strategic cloud security channel partnerships across APAC. Responsibilities include recruiting and onboarding partners, driving partner-sourced revenue, enabling joint selling, negotiating agreements, coordinating technical and marketing launches, conducting business reviews, and developing partner-led solutions. The role requires quota-carrying cybersecurity or cloud security SaaS experience, familiarity with cloud hyperscalers, strong technical communication skills, and 30–40% travel.

Provides strategic technology leadership and executive advisory to enterprise clients. Reviews solution engagements, develops fit-for-purpose technology concepts and designs, owns multi-year technology roadmaps and end-of-life strategies, and advises CIOs and senior technology leaders. The role requires broad expertise across infrastructure, cloud, security, business applications, and enterprise architecture, along with mentoring and talent development responsibilities.

Lead pre-sales security operations engagements across APJ by designing, configuring, and demonstrating ServiceNow Security Operations solutions. Develop integrated workflows using Armis asset intelligence, Veza identity governance, and ServiceNow incident response, threat intelligence, and vulnerability response. Advise customers, support sales campaigns and marketing events, maintain demonstration environments, collaborate with product and development teams, and share best practices. Explain security operations strategies, attack vectors, frameworks, and competitive differentiators to enterprise customers.

Detect and respond to security incidents across GitLab’s 24/7 global rotation, managing events from detection through recovery. Maintain incident response runbooks, conduct root-cause and lessons-learned reviews, automate security processes, improve detection capabilities, investigate cloud threats and infected hosts, and collaborate across teams on security projects and tooling.

Maintains and implements physical security infrastructure across datacenters, including access control and video systems. Responsibilities include programming systems for new capacity, break/fix support, on-call response, health and compliance monitoring, lifecycle management, vendor coordination, and process improvements. The role collaborates with engineering, project management, design, security operations, and facilities teams to improve physical security outcomes.

Lead security architecture and technical sales engagements for Splunk’s security business across APJC. Advise CISOs and senior technical leaders on SIEM, threat detection, SOC transformation, and AI-driven security operations. Develop enterprise security architectures, lead competitive displacement campaigns, mentor regional technical teams, create enablement assets and reference designs, and communicate customer and market requirements to Cisco and Splunk product and engineering teams.

Help customers understand Cribl’s value during the sales process, deliver product demonstrations, answer technical questions, support proof-of-concept sessions, and document customer use cases. The role requires familiarity with logs, metrics, IT operations, and security, along with strong English communication, remote-work experience, and willingness to travel across Australia and APAC.

Implement and operate cloud and on-premises cybersecurity controls for datacenter infrastructure. Proactively identify, investigate, and mitigate security issues; install and maintain security hardware/software; create detections and incident response plans; recommend security policy improvements; collaborate with partner teams and participate in on-call rotation.

Conducts threat intelligence analysis for internal and customer-facing investigations. Supports attribution and actor modeling, analyzes adversary infrastructure and tactics, develops emerging threat clusters, and applies cloud, identity, endpoint, log, and network telemetry. Provides intelligence support to incident response teams, improves Microsoft products based on observed exploitation, briefs technical and executive stakeholders, and feeds investigation findings into threat actor tracking efforts.

Drive new-logo acquisition across the APJ territory by identifying, qualifying, and closing enterprise sales opportunities. Develop account and territory plans, manage pipeline forecasts, exceed revenue targets, and evangelize SaaS security technology to F1000 accounts. Build relationships with IT security and business executives, collaborate with partners and internal sales resources, manage proof-of-value processes, and maintain competitive and market knowledge.

Own technical direction and execution for major products and engineering initiatives. Design scalable systems across backend, frontend, APIs, databases, and infrastructure; write code; lead architecture decisions; solve production problems; improve engineering quality; and mentor engineers across teams. The role requires hands-on software engineering leadership in a distributed, global organization.

Lead enterprise implementation of secure code scanning platforms across the SDLC. Integrate scanning tools with GitHub, GitLab, and CI/CD pipelines; establish security policies, quality gates, vulnerability management, remediation workflows, and governance processes. Support rollout and stabilization while mentoring development teams on secure coding practices and collaborating with DevOps and security stakeholders.

Supports secure coding and application security transformation initiatives by gathering requirements, defining standards and governance, documenting workflows, integrating security controls into SDLC and CI/CD pipelines, and supporting UAT, training, rollout, and change management for secure code scanning platforms.

Performs advanced security monitoring, threat hunting, incident detection and response, malware and network forensics, SIEM tuning, security tool configuration, and client reporting within a 24/7 global Cyber Defense Centre. The role handles security incidents end to end, supports major incident escalations, improves detection and response processes, recommends client system changes, documents best practices, and identifies automation opportunities.