We're partnering with a rapid-growing financial services organisation investing heavily in technology, cyber security and digital transformation. This is the first dedicated Cyber Security Engineer within the IT function, making it a rare prospect for someone who wants to build rather than maintain. You'll help shape the security capability, lay the foundations for future growth and stay highly hands-on.

The role is roughly 70% Security Operations and 30% Security Engineering, giving you the opportunity to own incident response while driving automation, tooling improvements and AI-led security initiatives.

What's a typical day look like?
Own Security Operations, incident response and threat investigations
Investigate, triage and respond to alerts across SIEM, EDR/XDR, Microsoft Defender and cloud platforms
Build automations using PowerShell, Python, APIs and native platform tooling
Integrate security tools to reduce manual effort and improve response times




Design AI-assisted security workflows to improve detection and investigation
Tune detections, policies and controls to reduce false positives
Work closely with Engineering and Infrastructure teams
Support the cyber uplift, digital transformation and security roadmap
Contribute to ISO 27001 and APRA security initiatives

About you:
4+ years' experience across Cyber Security Engineering, Security Operations or SOC
Strong hands‑on experience with SIEM, EDR/XDR and Microsoft security tools
Experience investigating incidents and leading security response activities
Automation experience using PowerShell, Python or similar
Exposure to Azure, Microsoft 365 and/or AWS
Comfortable improving tooling rather than just operating it
Financial Services or regulated industry experience is highly regarded
Curious, proactive and comfortable working in a fast-growing workplace
J-18808-Ljbffr

📌 Cyber Security Engineer City Of Sydney
🏢 Kapital Consulting
📍 City of Sydney