Cyber Security Analyst

Cyber Security Analyst
Melbourne CBD  -  Hybrid — 3-4 days on-site
Full-time
 
We're looking for a Cyber Security Analyst to help keep our customers and operations safe, resilient and ready for what's next.
This is a hands-on engineering role for someone who's as comfortable talking to a control-systems engineer on a plant floor as they are configuring a firewall or briefing leadership on good Cyber Security governance, risk and compliance.
You'll help protect operations that are genuinely critical — supporting the safe, reliable running of our business — while building your career across both IT and OT security.
 
What you'll do
Secure the business, end to end

• Deliver cyber security engineering services that protect the business and support its objectives.
• Keep engineering activity aligned to business goals, compliance obligations and risk appetite.
• Act as a trusted advisor on complex security issues spanning people, process and technology — across both IT and OT environments.

Design, build and run our defences

• Implement and integrate security controls across IT, OT and IoT systems.
• Own the lifecycle of key security technologies — firewalls, SASE, EDR, IAM, encryption and more.
• Embed DevSecOps practices into development and deployment pipelines.
• Use automation to enforce secure configuration baselines and maintain compliance.

Manage risk and stay compliant

• Run risk assessments, vulnerability management and gap analyses.
• Align practices to frameworks including ASD Essential Eight, AESCSF, ISA/IEC 62443 and NIST.
• Support compliance with regulatory obligations for critical infrastructure and privacy.

Respond and build resilience

• Support incident response, business continuity and disaster recovery activities.
• Act as an Incident Handler within the Cyber Security Incident Response Team (CSIRT), including out-of-hours support during critical incidents.

Stay ahead of the threat

• Bring internal and external threat intelligence into design decisions, risk assessments and incident response planning.
• Drive automation and orchestration to speed up detection and response, and keep engineering practices current as threats and technology evolve.

What you'll bring

• Strong knowledge of cyber security principles, frameworks and practices — OT experience highly regarded.
• Hands-on experience with application whitelisting, SASE, firewalls, proxy, email filtering, anti-malware, DLP and cloud platforms.
• Familiarity with DevSecOps, automation and orchestration tooling.
• Experience with vulnerability management, web application and API security, Zero Trust, PAM, NDR, UEBA and network-based encryption.
• Proficiency with Microsoft (Azure, O365), Linux (Red Hat) and mobile platforms (iPhone and Android).
• Strong communication and stakeholder engagement skills, with the ability to explain risk clearly to technical and non-technical audiences alike.
• Sharp analytical and organisational skills.
• A track record of providing thought leadership or mentoring within a cyber security team.

Qualifications & experience

• A degree in Cyber Security, IT, Engineering or a related field — or equivalent practical experience.
• Industry certifications highly regarded (e.g. CISSP, CISM, GICSP, SANS/GIAC).
• At least 4 years' experience in cyber security roles, ideally with exposure to OT environments.
• Demonstrated experience working with AESCSF, ISA/IEC 62443, ASD Essential Eight or NIST frameworks.

Why join us
You'll join a business where cyber security genuinely matters to safety and operational continuity, not just compliance. Based in Melbourne CBD with a hybrid working rhythm of 3-4 days on-site, you'll work closely with engineering, operations and leadership teams, with real scope to shape how our Cyber Safety Program evolves across both our IT and OT landscape.
 
Candidates must be eligible to work in Australia and able and willing to work on-site for 3-4 days per week (initially for 4 days each week)