Cromarty Automation is a trusted provider of Cyber Security, Industrial Automation, Electrical Engineering, and Renewable Energy solutions, with operations across Australia
For over 30 years, we've supported clients across industries including water, resources, manufacturing and infrastructure—delivering reliable, high-quality solutions that improve operational performance and asset reliability
Cromarty is seeking a Senior Cyber Security Engineer to deliver consulting engagements across solar, wind, utilities and manufacturing environments. This role focuses on regulatory compliance, OT cyber security, and practical engineering controls for energy assets operating under the SOCIand AEMO frameworks.
You will lead reviews, gap assessments, and improvement programs that span compliance management,OT security, and cloud data retention, working directly with asset owners, operators, and senior stakeholders.
This is a hands‐on role — not a policy‐only or SOC position.
What You'll Do
ReviewCritical Infrastructure Risk Management Plans (CIRMPs), and supporting systems against:
SOCI obligations
AEMO Registered Participant requirements
AEMO Cyber Security Framework
IEC***** OT Cyber Security Framework
Assess OT and plant environments, including:
SCADA, historians, PQM systems, and plant networks
Operating system baselining and hardening (Windows/Linux)
Patch, vulnerability,



and configuration management in OT contexts
Review and design:
Firewall architectures and rule sets (IT/OT boundary, zones & conduits)
Network segmentation aligned to Purdue / IEC *****
Secure remote and vendor access
Assess logging, monitoring, and incident readiness for cyber and compliance events
Perform structuredgap analysesand develop practical, prioritised recommendations
Produce explicit written reports and deliver client workshops (executive and operational)
What We're Looking For
7+ years' experience in
cyber security, OT security, or engineering
Proven experience in
energy, utilities, or critical infrastructure
Strong hands‐on skills with:
OS hardening and security baselines
Firewall configuration and network security
OT risk assessments and remediation planning
Ability to engage credibly with engineers, operators, and executives
Consulting or advisory experience strongly preferred
Mandatory Certifications
Applicants must hold at least oneof the following:
GICSP
GRID
ISA/IEC ***** Cybersecurity Specialist or Expert
CISSP(with demonstrable OT/energy experience)
Why Cromarty
Work on real energy assets, not theoretical cyber problems
High‐impact work with regulatory and operational significance
Trusted senior role with autonomy and influence
Competitive remuneration
#J-*****-Ljbffr

📌 Senior Cyber Security Engineer (Melbourne)
🏢 Cromarty
📍 Melbourne