Senior Security Engineer

About the role

Location: Australia, Remote

Who Are We?

About Airlock Digital:

Airlock Digital is a global leader in application control and allowlisting. We seek to empower every organization to run only what they trust and operate free from malware and ransomware.

With rapid growth across Australia, North America, and EMEA. We are committed to our core values, respect, determination, and integrity. We support a diverse and expanding global customer base. At Airlock, we pride ourselves on being a team of humble, collaborative, and driven professionals who support one another and share a passion for cybersecurity.

What We are Looking For:

We are seeking to appoint a Senior Security Engineer to join our Security Operations team. As a Senior Security Engineer, you will play a vital role in safeguarding our organization's information systems. You will design and implement security controls, administer security tooling, and be responsible for monitoring, incident response, and vulnerability management.

Key Responsibilities:

- Design, implement and maintain security controls, automations and monitoring solutions across our corporate applications, systems, cloud, and endpoints.

- Work with Security Operations team members to respond to security incidents by conducting initial investigations, containing threats, and coordinating remediation efforts. Identify and analyse potential security threats and vulnerabilities in real time.

- Own vulnerability management processes and tooling, ensuring timely remediation and reporting. Responsible for maturing this capability over time.

- Mentor junior engineers and analysts, as required.

- Work closely with IT and other security teams to coordinate responses and share insights on emerging threats and vulnerabilities.

Required Skills & Qualifications:

- 5+ years of experience in cybersecurity, with a focus on technical security operations, security tooling.

- Strong knowledge of security fundamentals (e.g. authentication, authorisation, cryptography).

- Strong understanding of SIEM tools (particularly Splunk), and network security technologies including firewalls, intrusion detection systems

- Strong understanding of endpoint security technologies (previous experience using Airlock is highly desirable)

- Experience in developing and maintaining detection rules, alerts, and playbooks

- Experience with vulnerability management tools and technical security assessments

- Knowledge and understanding of MITRE ATT&CK framework and attacker tools and techniques

- Understanding and practical experience implementing ACSC Essential Eight

- Understanding of network protocols, security architectures, and incident response methodologies

- Understanding of cloud (Microsoft Azure) and container security technologies