The security tooling is in place. Now someone needs to make it work properly.

A fast growing company on the Gold Coast needs a Security Engineer to run its security controls day to day, across AWS, Microsoft and Google.

Who you’d join

You’d report to a hands on CISO who sets the strategy and stays close to the technical detail. They’ll mentor you, and they want someone who finds a gap, raises it and closes it without being asked. It’s a small function, so alongside the bigger projects you’ll also sort the odd laptop or VPN issue.

The company A scale up built on a data set few competitors can match, in an industry that’s moving quick toward automation. They’re expanding internationally, they’re ISO 27001 certified, and they’re partway through SOC 2.

The culture and team

It’s a close knit team that works hard and gets on well. People spend time together outside work too, whether that’s a run, a ride, a few drinks or a weekend on the coast. It’s a friendly, happy place to work, and new people get brought into the fold quickly.

Your first year:

- Build out cloud security posture in AWS, which is close to a blank slate
- Harden identity across Entra ID and AWS, including moving admin access to a group based model
- Pull several disconnected vulnerability queues into one pipeline, and chase fixes through to closure
- Run Defender, Intune and Google Workspace security day to day
- Script away the repetitive work
- Keep controls audit ready, because auditors test everything you build





What you’ll bring You’re likely a security analyst or security engineer with around two years of hands on experience. One year is fine if you’re hungry. When something breaks, you fix it, and you also want to know why it happened and what else could go wrong.

- Hands on with AWS security (IAM, Security Hub, GuardDuty) or the Microsoft stack (Defender, Intune, Entra ID), and keen to learn the other
- Managing user access: least privilege, MFA, single sign on and access reviews
- Driving vulnerability fixes through to closure, including chasing busy owners
- Scripting in PowerShell, Python or Bash to automate repetitive work
- Some sign of your interest in security, like a cert, study in progress or community work

Systems engineers who have moved toward security are welcome, as long as the curiosity is real. SOC 2 or ISO 27001 exposure is a bonus. If you haven’t done every part of this, still apply. This is a hands on delivery role. If you’re after security strategy, governance or advisory work, or you’d rather skip the laptop and VPN fixes, it won’t be the fit.

It’s a new role, and you’d start as the tooling work begins. The stack spans AWS, Microsoft and Google, so you won’t spend your days inside one vendor console. Auditors independently test what you build, so your impact is visible. And for someone who takes initiative, there’s a clear path into design and direction work.

Hybrid, with three days a week in the Gold Coast office, so Brisbane works if you’re happy to commute.

Early applications are welcome. We’re actively interviewing for the role. Message me here or apply at

📌 Security Engineer (Gold Coast)
🏢 NextPlay
📍 Gold Coast