In larger cyber security teams, it's easy to become highly specialised.

You might investigate threats, identify vulnerabilities or recommend improvements, but rarely get to see the work through to resolution.

Our client is an established, growing multi-site healthcare organisation looking for a Security Engineer to become its primary internal cyber security specialist.

Here, you'll be responsible for turning security findings into practical improvements and seeing them through to resolution.

The Chance

The organisation is undertaking a significant cyber security uplift, supported by external specialists. You'll join while that work is underway, helping embed the improvements and maintain the controls being established.

You'll work closely with technology leadership, with genuine autonomy over day-to-day security engineering decisions. Mentoring and external specialist support will be available as you continue developing your expertise.

You'll work across cloud security, identity, endpoints, security operations and network security, rather than being limited to one discipline.

Your work will also help protect sensitive patient information and the systems healthcare professionals rely on to deliver care.

What You'll Be Doing

Your initial focus will be reviewing existing security reporting, understanding key vulnerabilities and developing a practical remediation plan.

Your responsibilities will include:

- Security operations: Interpret security alerts, Arctic Wolf MDR reporting and vulnerability findings, prioritise material risks and drive remediation.
- Cloud security: Improve security controls and configuration across Microsoft Azure, with some involvement in AWS.
- Identity and access: Strengthen Active Directory and Microsoft Entra ID controls, including MFA, Conditional Access and privileged access.
- Endpoint security: Improve device compliance,



application security and endpoint protection using Microsoft Intune and CrowdStrike.
- Network security: Review and improve FortiGate firewall configurations, policies and controls, working with external providers on more specialised requirements.
- Continuous improvement: Contribute to Essential Eight uplift, penetration testing, security awareness, technical standards and vulnerability management.

What You'll Bring

We're looking for a hands-on Security Engineer with sound technical judgement, the confidence to work independently and the ability to see security issues through to resolution.

You'll ideally bring:

- Strong hands-on security engineering experience, with good knowledge of Microsoft Azure security
- Experience interpreting SIEM/MDR reporting, investigating security findings and driving vulnerability remediation
- Practical knowledge of Active Directory, Microsoft Entra ID and identity security
- Exposure to endpoint security, EDR technologies and Microsoft Intune
- Sound networking and firewall security fundamentals
- The ability to assess technical risk, communicate recommendations and work effectively with internal teams and external providers

Experience with Arctic Wolf, CrowdStrike or FortiGate would be valuable, but expertise across every platform isn't essential.

Healthcare experience isn't mandatory. Experience in another regulated or operationally sensitive workplace would translate well.

Working Arrangements

This is a permanent position based in North Sydney, with five days per week onsite.

Remuneration is $180,000–$200,000 base salary plus superannuation, depending on experience.

Next Steps

For a confidential discussion, contact Steven Fulop on 04•• ••• 446 or [email protected], or Anthony Trimboli on 04•• ••• 782 or [email protected].

Alternatively, click Apply.

All applications and enquiries will be managed confidentially through xceltium.

📌 Security Engineer (North Sydney)
🏢 Xceltium
📍 North Sydney