Cyber Security Engineer

SAHMRI is seeking an experienced Cyber Security Engineer to help protect the systems, infrastructure, and data that support world-class health and medical research. Reporting to the Head of ICT, this is a 12-month contract role.

About the role

• Design, implement, and support security controls across on-premises and cloud environments.
• Protect sensitive research, clinical, participant, and corporate data.
• Manage and improve core security infrastructure, including firewalls, endpoint protection, Active Directory, and Microsoft Entra ID.
• Monitor systems and networks for threats, investigate incidents, and support response and recovery activities.
• Review and support secure access to internal and cloud-hosted applications, including SSO, TLS configuration, access controls, and monitoring.
• Conduct vulnerability assessments and support remediation activities.
• Strengthen identity and access management practices, including permissions, MFA, conditional access, and privileged access.
• Provide cyber security input into technology selection, procurement, architecture, implementation, and change processes.
• Support the development of security policies, playbooks, standards, and procedures.
• Partner with teams across SAHMRI to embed security into projects and operations.
• Provide guidance, mentoring, and awareness support to build cyber security capability.
• Prepare clear updates on risks, incidents, projects, and security posture for stakeholders and leaders.

Requirements

• A degree in Cyber Security, Information Technology, Computer Science, or a related field, or equivalent industry experience.
• At least two years’ experience in a dedicated cyber security role.
• Relevant cyber security certifications (highly regarded).
• Experience supporting cyber security in a small-to-medium ICT team.
• Experience securing Microsoft Active Directory and Microsoft Entra ID.
• Knowledge of identity and access management, including MFA, conditional access, and privileged access tools.
• Experience securing Windows and Linux environments; macOS exposure is advantageous.
• Strong network and infrastructure security knowledge, including firewalls, VPNs, intrusion detection/prevention, and monitoring tools.
• Experience with security monitoring, incident response, vulnerability management, SIEM, EDR, and log analysis.
• Practical knowledge of cloud security, particularly Microsoft Azure and hybrid environments.
• Familiarity with security frameworks and compliance requirements such as Essential Eight, NIST, and privacy obligations.
• Experience with endpoint protection, patching, and secure configuration standards.
• The ability to contribute to or lead security projects and improvement initiatives.
• Strong planning, prioritisation, and problem-solving skills.
• Excellent communication skills, with the ability to explain technical issues clearly to different audiences.
• A collaborative, proactive, and professional approach.
• The ability to mentor others and promote strong security awareness practices.

Special Requirements

• Some out-of-hours work may be required.
• DCSI Employment Screening and Police Checks may be required.

Benefits

• As a not-for-profit organisation, SAHMRI employees can access salary packaging options up to $15,900, reducing taxable income.

To be considered for this position, applicants must hold relevant working rights within Australia at the time of application.