Senior Cybersecurity Engineer

About the Role

Voltex Electrical Accessories, a rapidly expanding brand across Australia and New Zealand, is looking for a Senior Cybersecurity Engineer to serve as its primary security lead. This autonomous, remote role involves taking full ownership of the company's security posture and collaborating with leadership and developers to enhance infrastructure and the development lifecycle. You will protect digital assets through proactive testing, incident management, and security strategy. The position requires integrating threat modeling, security checks, and regression testing into CI/CD pipelines, while also fostering a culture of security awareness, mitigating risks with the Head of Technology, and investigating potential fraud or security incidents.

Requirements

• The ideal candidate possesses significant, hands-on experience in application security testing and a proven ability to shepherd security fixes from identification to verification.
• Candidates must have extensive experience investigating vulnerabilities in authenticated web applications, APIs, and mobile clients, utilizing intercepting proxies such as Burp Suite to validate business logic and authorization flaws.
• A strong technical foundation in .NET and IIS environments is required, alongside deep expertise in securing Microsoft Azure workloads, including proficiency in Entra ID administration, Conditional Access design, and privileged access management.
• You should be comfortable reading source code to explain root causes and guide developers through remediation efforts.
• Furthermore, candidates must have experience managing security within hybrid estates, including on-premises servers, Active Directory, Intune device management, and network security components like firewalls and SASE/SD-WAN.
• A clear understanding of security frameworks such as OWASP and the ASD Essential Eight is essential, as is the ability to communicate technical risk effectively to business stakeholders.
• Candidates must be capable of working remotely across AU/NZ time zones and ideally bring experience with incident response procedures, EDR platforms, and security awareness programs.

Responsibilities

• As the Senior Cybersecurity Engineer, you will conduct manual security testing on public-facing and internal web applications and APIs, focusing on critical areas like authorization, authentication, and session management.
• You will perform hands-on security assessments of mobile applications and backend services while utilizing automated scanners to support your manual investigations.
• A core responsibility involves reviewing source code, configurations, and system designs alongside developers to build security checks into the CI/CD pipeline, including dependency and secrets scanning.
• You will own the security posture in Microsoft Entra ID and Defender, overseeing alert routing, MFA coverage, and privileged access.
• Additionally, you will lead incident response efforts from initial detection through to post-incident review and provide security sign-off for high-risk changes.
• You are also expected to manage secrets and identity hygiene using Azure Key Vault, enforce least privilege principles, and lead ongoing security awareness and phishing resistance programs for Voltex staff.

Benefits & Perks

• The role offers a fully remote work-from-home arrangement with flexible working hours.
• Employees receive paid parental leave, along with annual and sick leave entitlements.
• The benefits package includes 20 Service Incentive Leave (SIL) days per year, comprehensive HMO healthcare coverage for up to four dependants, and a monthly food allowance.