Cyber Security Engineer

Cyber Security Engineer

Tranzformd Brisbane CBD Full-time, permanent $110,000-$120,000 + super

Tranzformd is a transformation consultancy and part of The Transformation Group. We partner with organisations across Australia to deliver technology, security and business transformation, and we pride ourselves on being genuine partners who get it done.

We're looking for a Cyber Security Engineer to join our Brisbane team and deliver security engineering outcomes for our clients.

You'll design, develop, implement and maintain security solutions that protect applications, systems, data and infrastructure. Working across both software and infrastructure environments, you'll help embed security into the development lifecycle, strengthen existing security controls and support the delivery of secure, resilient technology solutions.

You'll work as part of Tranzformd's delivery team on client engagements, including in the financial services and insurance sector.

• Design, develop, implement and maintain security solutions and controls across applications, networks, endpoints, identity and cloud environments.

• Develop and integrate secure coding practices and security controls into software development and deployment processes.

• Work with software developers, application teams and infrastructure engineers to identify, assess and remediate security vulnerabilities.

• Support secure software development lifecycle (SDLC) practices, including application security testing, code reviews and security validation.

• Design, implement and test application security controls, including API security, authentication, authorisation and encryption mechanisms.

• Assess the security of third-party software components, libraries and application integrations, identifying risks and recommending improvements.

• Configure, tune and maintain security tooling, including firewalls, intrusion detection and prevention, endpoint protection and SIEM platforms.

• Engineer and improve identity and access management controls, including MFA, privileged access and conditional access.

• Conduct vulnerability assessments across applications, systems and infrastructure, prioritising and coordinating remediation activities.

• Develop scripts and automation to improve security engineering processes, including security testing, monitoring and deployment.

• Integrate security testing and controls into CI/CD pipelines and support DevSecOps practices.

• Harden systems, applications and cloud environments against recognised frameworks and benchmarks, including the Essential Eight, ISO 27001 and CIS.

• Produce technical documentation, including security designs, configuration standards, test results and operational runbooks.

• Provide technical input to security incidents, penetration testing and audits, implementing improvements to strengthen security controls.

• Advise client stakeholders on technical security risks, engineering solutions and opportunities for improvement.

• At least 3 years' experience in a hands on cyber security engineering, application security or related technical security role.

• Experience designing, implementing and supporting security solutions across software applications, infrastructure and cloud environments.

• Understanding of secure software development practices, application security testing and vulnerability remediation.

• Familiarity with secure coding principles, software security controls, APIs and common application vulnerabilities, including the OWASP Top 10.

• Experience with network security, firewalls, endpoint protection and security monitoring platforms.

• Experience with identity and access management technologies, such as Microsoft Entra ID or Okta.

• Experience securing cloud environments, such as Microsoft Azure or AWS.

• Scripting or automation skills, such as PowerShell or Python.

• A tertiary qualification in cyber security, IT, computer science or a related field, or equivalent experience.

• Clear communication skills and confidence working with technical and non-technical stakeholders.

• Experience with DevSecOps practices, CI/CD pipelines or automated application security testing.

• Familiarity with static and dynamic application security testing (SAST/DAST) tools.

• Industry certifications such as CISSP, Microsoft security certifications (AZ 500 or SC 200), AWS Security or equivalent.

• Experience in financial services, insurance or other regulated environments.

• Experience with the Essential Eight, ISO 27001 or similar frameworks.

• $110,000-$120,000 base salary plus superannuation.

• Varied client work with a growing consultancy.

• Ongoing learning, professional development and certification support.

• A collaborative team that values being a true partner