Top Cyber Security Jobs in Melbourne

Own product strategy, vision, roadmap, discovery, delivery, commercial models, and go-to-market activities for a B2B SaaS product. Lead cross-functional initiatives, prioritize engineering backlogs, define success metrics, connect product decisions to revenue and retention, represent customer needs, and mentor junior product managers.

Manages a regional Security Operations Center supporting 24/7 incident investigation and response. Responsibilities include optimizing processes, workflows, playbooks, shift coverage, quality assurance, analyst development, training, cross-functional coordination, and operational metrics. The role provides technical leadership, supports detection and response initiatives, partners with Product and Support teams, operationalizes new services, and represents the organization in public speaking engagements.

Investigate and respond to cybersecurity alerts, intrusions, malware, and compromised cloud tenants. Analyze EDR/SIEM telemetry, logs, forensic artifacts, and network activity; perform malware analysis; develop and tune detections; provide remediation guidance; and support customer escalations. The analyst will collaborate with Product and Engineering, contribute to incident response and threat hunting, and communicate findings clearly to varied audiences.

Lead development of AI-powered information security tools, internal infrastructure, threat-hunting and remediation systems. Build and maintain Kubernetes clusters, serverless workloads, ETL pipelines, and large-scale log-processing infrastructure. Partner with engineering teams to automate security outcomes, support incident response, and reduce risk. Mentor software engineers and independently own technical roadmaps and project delivery.

Lead development of AI-powered information security tools, infrastructure, and applications. Build and maintain Kubernetes clusters, serverless workloads, ETL systems, and large-scale log pipelines. Develop threat hunting, remediation, security scanning, and patching automation tools while partnering with engineering teams to reduce risk. Mentor software engineers and independently deliver high-quality security projects.

Implements and operates enterprise security controls across identity, endpoints, cloud, SaaS, networks, and data. Automates security workflows using scripts, APIs, infrastructure as code, and CI/CD checks. Maintains IAM, endpoint protection, DLP, device posture, and secure configuration baselines. Supports vendor risk reviews, insider-risk monitoring, physical access integrations, incident troubleshooting, on-call operations, documentation, and remediation of security gaps across corporate technology environments.

Implements, operates, and improves enterprise security controls across identity, endpoints, cloud, SaaS, networks, and data. Builds automation using scripts, APIs, infrastructure-as-code, and CI/CD security checks. Supports IAM, endpoint protection, DLP, vendor risk assessments, physical access integrations, incident troubleshooting, and security operations. Partners with engineering, IT, legal, privacy, and business teams to deploy secure baselines, remediate risks, monitor control health, and improve enterprise security capabilities.

Supports customers and partners in designing, deploying, and adopting secure, scalable Azure cloud solutions involving data, analytics, AI, modern applications, automation, APIs, and security. Assists with technical presales, proof-of-concept engagements, architecture recommendations, customer outcomes, partner enablement, governance, risk mitigation, and solution adoption while developing expertise in Microsoft technologies and methodologies.

Leads customer-facing security advisory and sales support for Ericsson’s telecom solutions. Responsibilities include advising customers on cybersecurity, privacy, business continuity, risk assessment, governance, data management, product security, ISO 27001 controls, vulnerability assessment, and regulatory requirements. The role serves as the primary security contact, ensures contractual security commitments are addressed, drives internal security projects and gap closure, and coordinates cross-functional cybersecurity stakeholders across pre-sales and post-sales activities.

Lead complex security investigations and medium- to high-impact incident response as an Incident Commander. Coach junior analysts, conduct post-incident reviews, improve detections and runbooks, and coordinate security initiatives. Build automations and AI-assisted workflows with appropriate guardrails, collaborate with detection engineers, apply threat intelligence, and communicate clearly with customers and internal stakeholders. The role operates in a global follow-the-sun team with shared after-hours on-call responsibilities.

Design, implement, configure, and support enterprise network security solutions across data centre, cloud, and hybrid environments. Manage Cisco ACI, Check Point, and Palo Alto platforms; conduct firewall policy reviews, security assessments, rule optimization, troubleshooting, and health checks. Support segmentation, routing, connectivity, change management, documentation, compliance, and continuous improvement while collaborating with architects, project teams, and service stakeholders.

Provides security services across Melbourne Connect’s precinct and loading dock, monitors CCTV and access control systems, reviews incident footage, manages dock safety and bookings, captures access data, and prepares reports. The role requires independent and team-based work, incident response, access control administration, and coordination of after-hours activities. Candidates must hold Victorian security and driver’s licenses, security operations certifications, first aid and CPR credentials, and complete required background and employment checks.

Conducts threat intelligence analysis for internal and customer-facing investigations. Supports attribution and actor modeling, analyzes adversary infrastructure and tactics, develops emerging threat clusters, and applies cloud, identity, endpoint, log, and network telemetry. Provides intelligence support to incident response teams, improves Microsoft products based on observed exploitation, briefs technical and executive stakeholders, and feeds investigation findings into threat actor tracking efforts.

Leads the strategy, engineering, governance, and operational excellence of cloud networking, secure access, and network security services. Oversees Azure networking, hybrid connectivity, firewalls, data center technology, automation, Infrastructure as Code, AIOps, vulnerability remediation, incident escalation, supplier relationships, and service improvement. The role also mentors engineering teams, drives security and reliability transformation, and partners with architecture, cloud, cybersecurity, and service management teams.

Manage and troubleshoot cybersecurity services within DXC’s secured infrastructure team. Responsibilities include onboarding services, supporting high-priority infrastructure and security incidents, maintaining security configurations and compliance, meeting managed-service SLAs, implementing project requirements, automating administrative tasks, and coordinating with vendors. The role requires IT/OT security operations experience, cloud knowledge, firewall, proxy, and email security expertise, incident response capability, and Australian citizenship with National Police Clearance eligibility.

Serve as technical presales lead for Elastic in the assigned territory: advise sales and partners, design solutions using Elastic products, drive customer discovery to technical wins, enable partners, represent Elastic at events, and relay customer feedback to product teams. Travel ~30% regionally and occasionally internationally.

Provides enterprise-wide security engineering and architecture leadership across corporate and technology functions. Leads complex security programs, architecture reviews, threat assessments, control design, and risk-based decisions. Advises senior executives, defines scalable security patterns and guardrails, mentors security practitioners, and guides capabilities including EDR, SIEM, observability, AI security, DevSecOps, and cloud security.

Own DISCO’s end-to-end security program across application security, AWS infrastructure, identity and access, detection and incident response, compliance, and risk. Lead threat modeling, secure architecture reviews, vulnerability remediation, penetration testing, security baselines, monitoring, incident investigations, SOC 2 activities, and security roadmap development. The role partners with engineering, product, legal, and leadership while mentoring staff and strengthening security culture in a remote SaaS environment.

Supports third-party cyber assurance across supplier onboarding, oversight, material changes, and renewals. Reviews supplier evidence, questionnaires, controls, certifications, and audit findings to identify risks and gaps; develops risk-based recommendations; monitors supplier security posture; prepares governance reporting; and maintains audit-ready records. Partners with stakeholders on remediation and improves assurance processes, templates, and tools while using approved AI technologies to enhance assessment and reporting efficiency.

Supports enterprise identity and access management by streamlining user provisioning, reviewing access and role mappings, performing segregation-of-duties checks, and ensuring compliant access controls. Partners with business, IT, and application teams to determine appropriate user access, resolve security-related issues, maintain documentation, improve process consistency, and identify automation opportunities.

Designs and delivers AI-powered security automation, agents, RAG solutions, cloud-native platforms, integrations, and ChatOps capabilities. Builds event-driven pipelines across SIEMs, cloud services, and business systems while applying secure software engineering, CI/CD, and DevSecOps practices. Partners with technical, delivery, sales, and customer teams to solve complex security challenges, improve operational efficiency, and mentor others. The role requires extensive enterprise software, AI/ML, cloud, cybersecurity, and automation experience, with strong Python and AWS expertise.

Plans and executes full-scope red team and adversary emulation operations, including phishing, C2, privilege escalation, lateral movement, EDR/XDR evasion, Active Directory and cloud compromise, and social-engineering scenarios. Develops custom offensive tooling, collaborates with Blue Teams to validate detections, documents attack chains, and provides remediation guidance. Requires 5+ years of offensive security experience, advanced scripting skills, and recognized offensive security certifications, with bug bounty or CTF achievements preferred.

Leads red-team and penetration-testing exercises, attack-surface analysis, threat research, AI application security testing, and offensive security tool development. Evaluates enterprise systems, cloud environments, APIs, and AI agents; develops attack scenarios, PoCs, automation, and technical reports. Partners with blue teams, infrastructure, engineering, and business teams to improve detection, incident response, governance, and security controls. Requires more than five years of offensive security experience and strong expertise in cybersecurity tools, programming, and AI security.

Leads customer-facing proactive cybersecurity engagements, including tabletop exercises, security posture and incident response readiness assessments, incident response plans and playbooks, response training, compliance reviews, vulnerability assessments, and security-control recommendations. Develops network topology recommendations and reports for technical and executive audiences while helping mature proactive security services.

Own strategic enterprise accounts across Victoria and Australia, driving new customer acquisition and expansion revenue for Cursor. Manage full-cycle B2B sales, including prospecting, discovery, evaluations, negotiations, security reviews, procurement, and closing. Build account strategies, engage engineering leaders and CTOs, create pipeline, collaborate with Sales Engineering and Customer Success, and establish repeatable enterprise sales motions in the region.