{"id":2945912,"url":"https://alion.io/job/mantel-group-lead-cyber-security-engineer","title":"Lead Cyber Security Engineer","company":{"id":60513,"name":"Mantel Group","domain":"mantelgroup.com.au","url":"https://alion.io/company/mantel-group","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"A","score":95,"open_postings":14,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":105,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brisbane, Australia","Melbourne, Australia","Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":84000,"max_usd":220000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":679},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"Cortex","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"IAM","optional":false},{"name":"Jira","optional":false},{"name":"Least Privilege","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false},{"name":"Zero Trust","optional":false},{"name":"GCP","optional":true},{"name":"Kubernetes","optional":true},{"name":"Model Context Protocol","optional":true},{"name":"Prometheus","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-10-20T06:03:31Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-25T05:15:51Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":4},"description":"About us\nMantel is an Australian-owned technology consulting business with capabilities across Cloud, Digital, Data, Delivery & Security. Since our inception in November 2017, we have experienced remarkable growth across Australia & New Zealand and are honoured to be recognised as a Great Place to Work for 7 years in a row!\nWe hire smart and talented people and get out of their way. As a principle-based organisation we have a flat structure with no hierarchy. By focusing on our five principles and not getting caught up in red tape, we trust you to get the job done!\nWorking in our growing cyber security capability allows you to work closely with clients across our teams. Our security capabilities span governance, risk and compliance, cyber engineering, and offensive security. We enable large-scale cyber security initiatives for our clients, and improve the protection of IT environments.\n\nAbout the role\nThis position will have a wide remit, covering hands-on engineering delivery, resident engineer and advisory work with clients and partners, stakeholder management, and pre-sales support. The role will both deliver direct consulting services to clients in the area of cloud, DevSecOps and AI security design and implementation, as well as act as a bridge between the security engineering team and broader Mantel capabilities to help ensure that the technical solutions we recommend and deliver to clients will achieve the strategic objectives intended.\nYou’ll bring a strong background in cloud and DevOps engineering, including cloud networking, along with experience in security architecture, solution design and a broad range of security controls and solutions. The role requires a proven ability to develop security solution designs, as well as to integrate and configure security tools into new or existing software delivery pipelines. We value people who understand the security rationale behind a control, not just the product settings.\nWhilst this role will have a focus around CNAPP platforms (Palo Alto Networks Cortex Cloud and Wiz), we are not expecting this to be the entirety of the role, with application across DevSecOps, SASE, cloud network security, AI security and general cloud security expected.\nYour day-to-day\nUnderstanding client business requirements, current strategies, technologies, limitations and translating them into robust, justifiable security solution definitions.\n\nDelivering large scale cloud security projects to drive Continuous Threat Exposure Management (CTEM) outcomes for enterprise customers, in particular using CNAPP and exposure management platforms such as Palo Alto Networks Cortex Cloud and Wiz\n\nDesigning and deploying security controls, including policy as code (e.g. OPA/Rego, Checkov), across the following use cases:\nApplication security - securing developer pipelines and workflows, including SAST, SCA, secrets and IaC scanning in CI/CD, with findings routed to Jira or ServiceNow\n\nCloud Platform Security - CSPM, CIEM and DSPM using platforms such as Cortex Cloud and Wiz\n\nRun time security - Both agent and agentless based approach deploying EDR and CWPP and providing unified SecOps outcomes for predominantly cloud native environments\n\nEngineering and migration work on CNAPP rollouts, including onboarding cloud accounts, code repositories and workloads, and moving clients off legacy tooling\n\nIntegrating CNAPP platforms with each client’s wider stack, such as CrowdStrike, Qualys, ServiceNow, SIEM and CI/CD tooling, so findings reach the people who fix them\n\nWorking as a resident engineer with clients and partners: advising on platform use, running enablement sessions and handing over to operations teams\n\nDeveloping designs encompassing security infrastructure, platforms and services. This may include network security group policies, IAM controls, data loss prevention protection policies and more.\n\nReviewing, designing and implementing secure solutions across major cloud providers (AWS, Azure, Google)\n\nSupport key security partnerships with partners like Palo Alto and Wiz , keeping informed of product developments and releases and maintaining relationships with key Palo and Wiz system and product SE’s\n\nSupporting sales and pre-sales activities with clients, including solution design, effort estimates and SOW input\n\nWhat you’ll need to be successful:\nA strong DevOps and cloud engineering foundation: building CI/CD pipelines (e.g. GitHub Actions, GitLab CI or Azure DevOps), writing Terraform or other IaC, scripting in Python or Bash, and designing cloud networking in AWS and/or Azure\n\nExtensive knowledge and hands-on experience with CNAPP platforms (Palo Alto Networks Cortex Cloud preferred; Wiz or comparable platforms also considered), specifically experience with one of below solutions\nCortex (CNAPP)\n\nPrisma access (SASE)\n\nSoftware firewalls\n\nExperience in designing, implementing and maintaining security solutions and control implementations; primarily in cloud and / or hybrid environments\n\nSolid grounding in security fundamentals (CIA triad, least privilege, defence in depth, encryption, logging and monitoring) and cloud security basics across AWS and Azure\n\nStrong knowledge of zero trust principles and architectures, as well as their practical limitations and inhibitors to successful implementations\n\nComfortable using AI coding assistants and agents to speed up your own engineering work, with a sensible view of where they need guardrails\n\nWillingness to continually upskill and flex across platforms and clients as demand shifts; including learning new technologies and obtaining new certifications\n\nExperience in mentoring and leading junior consultants\n\nExperience in providing technical security leadership within project teams and projects\n\nComfortable working embedded in client and partner teams as a resident engineer: managing your own workload, raising risks early and leaving clear documentation and handover behind\n\nExperience working in regulated environments\n\nExcellent written and verbal communication skills including the ability to liaise with and influence diverse stakeholder groups\n\nNice to have:\nSome Palo Alto product certifications such as PCSSE or presales certifications including PSE-SASE, PSE-Strata , PSE-Cortex or Palo Alto Networks certifications or partner accreditations (e.g. Cloud Security Professional, PSE SASE Professional, PSE Software Firewall Professional), or Wiz accreditations (e.g. Wiz Cloud Delivery Professional)\n\nCloud security certifications (AWS, Azure or Google Cloud)\n\nExperience securing Kubernetes and containers (CKS a plus)\n\nHands-on experience implementing security solutions SASE/SSE design and implementation (Prisma Access preferred; Zscaler or Netskope equally relevant), ideally deployed and integrated through Terraform and policy as code\n\nPalo Alto Networks software or cloud firewalls (e.g. Cloud NGFW) managed through Strata Cloud Manager\n\nExperience securing AI and agentic workloads, such as Prisma AIRS, AI-SPM in Cortex Cloud or Wiz, or MCP and agent permission controls\n\nExperience working with risk management systems and reporting systems.\n\nWhat you can expect from us:\nYou’ll get all the tools you need to hit the ground running including a new phone, laptop & swag.\n\nWe believe in unique experiences for all. Our My Deal program allows you to tailor your yearly plan, with the support of your Leader, to decide on what’s most important to you. That might be extra professional development, extra annual leave, time to work on your side hustle, or something else completely different! One size does not fit all.\n\nMantel is a certified Family Inclusive Workplace, which means we are committed to improving your wellbeing at work through leading practices on flexible work, parental leave, family care and family wellbeing\n\nA true investment in your AI-first career. We are a fully AI-enabled consultancy and provide you with the tools to lead. This includes access to the Mantel AI Gateway, our secure, centralised platform with multiple AI models, plus a dedicated monthly budget and a safe environment to experiment and innovate.\n\nYou’ll be genuinely supported by an organisation that cares about not only you but your family as well, Mantel offers Flexible Personal Leave options for those unplanned moments in life.\n\nWe support a flexible hybrid approach to working which is guided by our principles; we trust each other to “make good choices” about the best workplace locations for the requirements of the project, role and client. This can change based on our client needs.\n\nWe know you won’t have one job for life. At Mantel, we believe in supporting our team to take their career in a direction that aligns with their passions. We have internal opportunities across Cloud, Data, Digital, Delivery & Security.\n\nOur elite partnerships are a direct result of our deep platform mastery. For you, this means you'll be working alongside teams with the highest levels of technical expertise and tackling the most complex, high-profile projects on the market.\n\nClick ‘Apply for this job’ to be considered for this role and our Talent team will be in touch.\nWe value a diverse workplace and strongly encourage people from all backgrounds and minority groups to apply.","description_format":"text","description_chars":9257,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Flexible schedule","Parental leave","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Professional Services","Cloud Consulting & Migration","Data Engineering & Migration Services"],"lifecycle":[{"event":"open","at":"2026-10-20T18:43:50Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":105,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/mantel-group-lead-cyber-security-engineer","json_url":"https://alion.io/job/mantel-group-lead-cyber-security-engineer.json","meta":{"generated_at":"2026-10-25T06:31:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8993,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":60513},"rest":"https://alion.io/mcp/rest/get_company?id=60513"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmantel-group-lead-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmantel-group-lead-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmantel-group-lead-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mantel-group-lead-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmantel-group-lead-cyber-security-engineer"}]}