We're partnering with a fast-growing financial services organisation investing heavily in technology, cyber security and digital transformation. This is the first dedicated Cyber Security Engineer within the IT function, making it a rare opportunity for someone who wants to build rather than maintain. You'll help shape the security capability, lay the foundations for future growth and stay highly hands-on.

The role is roughly 70% Security Operations and 30% Security Engineering, giving you the opportunity to own incident response while driving automation, tooling improvements and AI-led security initiatives.

What's a typical day look like?

- Own Security Operations, incident response and threat investigations
- Investigate, triage and respond to alerts across SIEM, EDR/XDR, Microsoft Defender and cloud platforms
- Build automations using PowerShell, Python, APIs and native platform tooling
- Integrate security tools to reduce manual effort and improve response times




- Design AI-assisted security workflows to improve detection and investigation
- Tune detections, policies and controls to reduce false positives
- Work closely with Engineering and Infrastructure teams
- Support the cyber uplift, digital transformation and security roadmap
- Contribute to ISO 27001 and APRA security initiatives

About you:

- 4+ years' experience across Cyber Security Engineering, Security Operations or SOC
- Strong hands‑on experience with SIEM, EDR/XDR and Microsoft security tools
- Experience investigating incidents and leading security response activities
- Automation experience using PowerShell, Python or similar
- Exposure to Azure, Microsoft 365 and/or AWS
- Comfortable improving tooling rather than just operating it
- Financial Services or regulated industry experience is highly regarded
- Curious, proactive and comfortable working in a rapid-growing environment

#J-18808-Ljbffr

📌 Cyber Security Engineer (City of Sydney)
🏢 Kapital Consulting
📍 City of Sydney