Founded in the Queensland outback in 1920, Qantas has grown to be Australia’s largest regional, domestic, and international airline. Qantas has a range of subsidiary businesses that support the overall operations of the Group. The Qantas Group’s main business is the transportation of customers and freight using two complementary airline brands — Qantas and Jetstar — operating regional, domestic, and international services.

Job Description

- Become a part of our Qantas Group Cyber Defence Team
- Join an amazing team that values and prioritises cyber security, in a hands-on engineering role across the core security platforms that defend the Group
- Permanent role based in Sydney OR Melbourne

At Qantas, we represent Australia to the world. Our diverse country is known for its unique spirit, mateship, and a can-do attitude. Together we’re strong and resilient, and we work hard to make sure we’re always at our best.

The Manager Cyber Defence - Endpoint, Identity & Data Protection is the lead engineer owning a subset of our core security platforms end to end, from evaluation through deployment and into live service. The portfolio spans endpoint, identity, network edge, web gateway, email gateway, data protection, cloud security, SaaS security, and AI detection and response, and there is scope to specialise in a subset of it.

This is a hands-on tools engineering role and relationships are central to it. You will partner with business and technology teams across the Group on control coverage and effectiveness.

Responsibility’s including

- Shape the 1-3 year plan for your platforms, aligning priorities with the broader Cyber strategy, business goals and emerging technology opportunities.
- Identify new capability,



run the evaluation and proof of value, and take the technology through deployment into production and steady state service.
- Own your platforms once live, including control health reporting, policy tuning, coverage and continuous improvement.
- Build strong partnerships across business, technology, vendors and industry peers, and govern controls, risks, suppliers and service performance to support regulatory, privacy and PCI DSS obligations.
- Service our Security Operations Centre with the detections and telemetry they need, and partner with Cyber Assurance to keep controls evidenced.

What You Will Bring

- At least seven years' experience in cyber security, information security or technology risk, including hands-on experience as a security engineer or in a closely aligned technical role.
- Technical Skils: Endpoint Detection & Response (EDR), Identity Threat Detection & Response (ITDR), Network Security, Secure Web Gateway, Email Security, Data Loss Prevention (DLP), Cloud Security, SaaS Security, Security Engineering, SIEM, Security Governance, Cybersecurity, Information Security
- Emergent Tech - AI Detection & Response would be advantageous
- Demonstrated experience owning and operating enterprise security platforms in a business-as-usual environment, with particular strength in endpoint and identity controls.




- Experience securing cloud and SaaS environments, including AWS, Microsoft 365, CSPM and CASB controls.
- Proven experience taking a security technology from evaluation through deployment and into production.
- Experience managing security service providers to agreed SLAs, and supporting security operations with detection content and telemetry.
- Experience conducting cyber security and technology risk assessments, and developing security governance, policies, standards and control frameworks.
- Strong analytical and problem-solving skills, with the ability to translate technical risks into transparent business impacts and recommendations.
- Excellent stakeholder management, influencing, advisory and communication skills, including executive-level reporting.
- Strong people skills, ability to connect with others and end to end technical management and precuring the technology into deployment through strong communication and engagement skills
- Experience in large, complex or regulated environments, such as aviation, financial services or critical infrastructure. AI based cyber threat experience is highly advantageous.
- Desirable experience with relevant frameworks and certifications, including NIST, ISO 27001, Essential Eight, SOCI, PCI DSS, CISSP, CCSP or CISM.

Please note: We have more than one opportunity open in Group Cyber Defence If your background is in API security, DNS or edge protection, see our other Manager Group Cyber Defence advertisement.

Why Qantas?

You’ll join a team where creativity and passion are encouraged. Our people come together to allow us to dream big and deliver successfully.

There are many di

📌 Manager Cyber Defence (Melbourne)
🏢 Qantas
📍 Melbourne