Security Engineer, Level 3

• Act as a senior technical authority for security across multiple customer environments
• Design, review, and improve customer security architectures
• Establish security standards, recommended configurations, and repeatable best practices
• Identify architectural weaknesses and develop remediation roadmaps
• Review security solution designs and support onboarding, migrations, and major infrastructure changes
• Mentor L1 and L2 engineers
• Lead complex security escalations and configuration investigations
• Administer, configure, and optimise Microsoft Defender solutions
• Design and implement Defender policies and standard configurations
• Investigate complex security incidents involving endpoints, identities, email, and cloud environments
• Use Microsoft Defender XDR for advanced threat analysis
• Provide senior technical support and architecture guidance for Sophos environments
• Design and review firewall deployments and configuration baselines
• Configure and optimise firewall rules, segmentation, NAT, intrusion prevention, VPNs, SD-WAN, high availability, logging, and monitoring
• Design, implement, and maintain ZTNA solutions
• Own and improve vulnerability management across customer environments
• Prioritise and lead remediation of critical vulnerabilities
• Develop vulnerability dashboards, reporting, remediation standards, and security roadmaps
• Provide senior-level support for Huntress deployments and investigate advanced detections
• Oversee operating system and application patch management
• Define patching standards and ensure critical patches meet service-level agreements
• Lead customer security compliance initiatives and remediation
• Assess environments against Essential Eight, CIS Controls, NIST Cybersecurity Framework, ISO 27001, and cyber insurance requirements
• Design and improve identity security controls, including Conditional Access, MFA, PIM, and least-privilege access
• Maintain endpoint security configurations and hardening baselines
• Lead technical investigations into complex security incidents
• Coordinate containment, remediation, endpoint isolation, and account protection
• Automate recurring security activities using PowerShell, APIs, and other technologies
• Develop reusable deployment processes, tools, scripts, and templates
• Support customer environments as a senior escalation resource
• Manage incidents and projects through the PSA platform
• Maintain technical documentation and participate in solution design and reviews
• Support customer onboarding, security assessments, and pre-sales activities
• Develop customer security roadmaps with Account Managers and vCIOs
• Explain security risks and recommendations in clear business language

• Significant experience within an MSP, MSSP, or IT Service Provider environment
• Strong hands-on experience with Microsoft Defender and its security ecosystem
• Advanced experience with Sophos Firewall and endpoint security technologies
• Proven experience managing vulnerability and patch management programs
• Experience implementing security controls across Microsoft 365 environments
• Strong knowledge of Microsoft Entra ID and Zero Trust security principles
• Solid understanding of TCP/IP, DNS, DHCP, VLANs, routing, firewalls, VPNs, and network segmentation
• Strong Windows Server and endpoint troubleshooting capabilities
• Experience handling complex technical escalations and leading remediation activities
• Ability to design and implement practical security improvements
• Hands-on experience with ConnectSecure and Huntress is highly desirable
• Experience with Sophos ZTNA, Microsoft Intune, Microsoft Defender XDR, and Conditional Access is advantageous
• Familiarity with Microsoft Defender for Endpoint, Office 365, Identity, and Vulnerability Management
• Knowledge of Essential Eight, CIS Controls, NIST Cybersecurity Framework, and ISO 27001
• PowerShell scripting and API-based automation experience is beneficial
• Familiarity with HaloPSA, ConnectWise, or Autotask
• Relevant Microsoft, Sophos, or cybersecurity certifications are advantageous
• Experience assessing security architectures and identifying technical weaknesses
• Ability to translate compliance requirements into practical security controls
• Strong understanding of cybersecurity threats, attack techniques, and defensive measures
• Experience developing remediation strategies, security baselines, and technical standards
• Ability to prioritise vulnerabilities based on exploitability, exposure, asset criticality, and business impact
• Strong written and verbal English communication skills
• Excellent technical documentation and reporting capabilities
• Ability to lead complex remediation activities and provide technical direction
• Strong problem-solving skills and a methodical approach to incident investigation
• Ability to remain calm during critical incidents while considering customer priorities and operational impact
• Proactive mindset focused on root causes, automation, standardisation, and preventing recurring issues

• Get paid in Australian Dollars
• Medical insurance from day one for you + spouse (or parents if unmarried)
• Generous OPD coverage from doctor visits to all your medical needs
• Home office setup allowance
• Internet allowance
• Gym & wellness allowance
• Regular team events & engagement activities
• Mental health & counseling support
• Reimbursement for industry certifications
• Open-door culture
• Flexible work – home or office, wherever you do your best work
• Rewards & recognition
• Christmas and financial year-end parties