Cyber Security Engineer

We are looking for a Security Engineer to join Avant's Security Engineering team and help shape the security capabilities that protect our people, systems and data. This is an opportunity to work across a diverse technology landscape spanning on-premises, cloud and SaaS environments, designing and delivering security controls that enable secure business and technology change.

Working closely with security, technology and business stakeholders, you'll play a key role in engineering, integrating and automating security solutions that reduce risk, improve resilience and strengthen Avant's cyber security posture. Combining technical expertise with a practical, solutions-focused approach, you'll help embed security into technology delivery while driving continuous improvement across our security platforms and capabilities.

We value strong security engineering fundamentals, a deep understanding of security control objectives, and a willingness to learn and apply new technologies. Experience with specific vendor platforms is helpful, but your ability to understand the underlying security outcomes and adapt to new tools is what will set you apart.

The role has four key priorities:

1. Engineering, integrating and continuously improving security controls and capabilities across cloud, SaaS and on-premises environments.
2. Leveraging automation, integrations and DevOps-style practices to improve the efficiency, consistency and effectiveness of security engineering activities.
3. Partnering with technology, application and business teams to support secure project delivery and embed security into solutions from the outset.
4. Providing secondary support for Identity and Access Management (IDAM) engineering, helping maintain team resilience and operational continuity.

Key accountabilities:

• Design, build, configure and deploy security controls across hybrid environments.
• Engineer and integrate security technologies that support secure business and technology change.
• Manage and optimise security platforms across endpoint, email, network, cloud and security monitoring domains.
• Develop automation, workflows and integrations that improve operational efficiency and reduce manual effort.
• Support SIEM onboarding, log management, detection engineering and alert tuning activities.
• Assist technology teams with vulnerability remediation and secure configuration initiatives.
• Review and govern network security policies, firewall rules, segmentation controls and secure connectivity requirements.
• Partner with Security Architecture, BISO, infrastructure and application teams to implement security controls and risk treatments.
• Contribute to continuous improvement initiatives, platform lifecycle management and capability uplift across the security function.

Skills and experience required:

• 3-5 years' experience in Security Engineering, Cyber Security, Infrastructure Security or a related discipline.
• Hands-on experience across multiple security domains including network security, EDR, SIEM, cloud security, email security or vulnerability management.
• Strong understanding of networking, operating systems, identity management and cloud security concepts.
• Experience implementing and supporting security controls across hybrid environments.
• Exposure to scripting, APIs, automation or DevOps practices.
• Experience supporting SIEM onboarding, security monitoring and detection engineering activities.
• Excellent communication skills with the ability to engage technical and non-technical stakeholders.
• A continuous learning mindset and passion for emerging security technologies.

Highly Regarded

• Hands on experience with technologies such as CrowdStrike, Netskope, BeyondTrust, Abnormal AI, SIEM, IDAM or PAM platforms is beneficial not mandatory.
• Cloud security experience across Azure and/or AWS.
• PowerShell, Python, automation or infrastructure-as-code experience.
• Experience in regulated industries such as financial services, healthcare or insurance.
• Knowledge of APRA CPS 234, ISO 27001, NIST or CIS Controls.
• Industry certifications such as CISSP, CISM, CCSP, AZ-500, Security+, CEH or OSCP.

Why join Avant?

Purpose-driven organisation supporting Australia's healthcare community.
Opportunity to work across a modern and diverse security technology landscape.
Exposure to cloud, automation and security transformation initiatives.
Collaborative and high-performing cyber security team.
Hybrid working environment with a strong commitment to professional development and continuous learning.

For further information, please contact Sue Allen, Talent Acquisition Business Partner on 0429 404 856.

Equal Opportunity Employer
Avant supports doctors so they can serve Australia's diverse communities. Having diversity in our workforce brings valuable perspectives and strengthens our ability to support healthcare professionals.
We therefore welcome applications from people of all backgrounds, including Aboriginal and Torres Strait Islander peoples, people from culturally diverse communities, LGBTQIA+ individuals, people with disabilities, and those with caring responsibilities.

Our inclusive workplace is somewhere everyone can succeed.

Ready to join us? If you're passionate about supporting Australia's healthcare professionals, we'd love to hear from you. If you require any adjustments during the recruitment process, please don't hesitate to contact us at careers@avant.org.au