Role Summary The Cyber Security Engineer is responsible for supporting NIST CSF / NIST 800 assessments, triaging penetration test findings, and driving remediation activities across application, infrastructure, network security, and monitoring platforms.

The role is hands-on and delivery focused, working closely with architects, platform owners, SOC, and infrastructure/application teams to translate security findings into actionable fixes, validate control effectiveness, and support audit‑ready evidence for regulated/government environments.

Key Responsibilities

NIST Assessment Support (CSF / NIST 800 Series)

- Support NIST CSF / NIST 800‑53 / 800‑61 / 800‑92 assessments through:

- Control evidence collection

- Gap analysis support

- Mapping tooling controls to NIST requirements

- Assist architects and governance teams in preparing:

- Control implementation summaries

- Tool capability mapping

- Evidence packs for audits and client reviews

- Track and manage security gaps, risks, and remediation actions in line with agreed timelines

- Support continuous improvement initiatives driven by assessment outcomes

Penetration Test Findings & Remediation

- Triage and analyse application, infrastructure, and network penetration test findings

- Work with platform and application teams to:

- Validate findings (true positive vs false positive)

- Prioritise remediation based on risk and exploitability

- Execute or support remediation actions such as:

- Configuration hardening

- Policy tuning

- Control enablement or enhancement

- Track remediation status and provide clear closure evidence for governance and audit forums

Hands‑on engineering support across
- Endpoint & Infrastructure Security

- Vulnerability & Exposure Management

- Activities include





- Policy tuning and baseline hardening

- Coverage and health checks

- Supporting remediation of vulnerabilities and misconfigurations

- Validating fixes post‑remediation

Support security controls across
- Cisco security platforms

- Imperva

- Microsoft GSA / related network security controls

Responsibilities include
- Supporting firewall / network security rule reviews and clean‑ups

- Assisting with remediation of network‑related pen test findings

- Supporting change validation and post‑implementation checks

- Working with network teams to ensure security controls align with NIST and secure‑by‑design principles

- Support SIEM and monitoring platforms:

- Splunk

- Microsoft Sentinel

- Assist with

- Log source onboarding validation

- Detection coverage checks related to NIST and pen test scenarios

- Validation that remediated controls generate expected telemetry

- Support SOC teams with investigation data where required

- Maintain accurate documentation for

- Remediation actions

- Control changes

- Evidence required for audits and MSSR / governance reviews

- Participate in

- Incident and problem reviews (P1 / P2 support)

- Root cause analysis where control gaps are identified

- Follow structured change and release processes (CAB, validation, rollback awareness)

Skills & Experience

- 5 years experience in security engineering / SecOps / blue team roles

- Exposure to NIST CSF or NIST 800 frameworks

- Hands‑on experience supporting remediation across:

- Endpoint / infrastructure security tools

- Vulnerability management platforms

- Network security controls

- Experience working with penetration test reports and remediation tracking

- Familiarity with SIEM platforms (Splunk and/or Sentinel)

- Robust documentation and evidence‑driven mindset (audit readiness)

📌 SOC Analyst (Melbourne)
🏢 XPT Software Australia Pty
📍 Melbourne