Lead Security Engineer - Endpoint, Identity & Data Protection

Founded in the Queensland outback in 1920, Qantas has grown to be Australia’s largest regional, domestic, and international airline. Qantas has a range of subsidiary businesses that support the overall operations of the Group. The Qantas Group’s main business is the transportation of customers and freight using two complementary airline brands - Qantas and Jetstar - operating regional, domestic, and international services.

• Become a part of our Qantas Group Cyber Defence Team
• Join an amazing team that values and prioritises cyber security, in ahands-on engineering role across the core security platforms that defend the Group!
• Permanent role based in Sydney OR Melbourne

At Qantas, we represent Australia to the world. Our diverse country is known for its unique spirit, mateship, and a can-do attitude. Together we’re strong and resilient, and we work hard to make sure we’re always at our best.

The Lead Security Engineer - Endpoint, Identity & Data Protection owns a subset of our core security platforms end to end, from evaluation through deployment and into live service. The portfolio spans endpoint, identity, network edge, web gateway, email gateway, data protection, cloud security, SaaS security, and AI detection and response, and there is scope to specialise in a subset of it.

This is a hands-on tools engineering role and relationships are central to it. You will partner with business and technology teams across the Group on control coverage and effectiveness.

Responsibility’s including

• Shape the 1-3 year plan for your platforms, aligning priorities with the broader Cyber strategy, business goals and emerging technology opportunities.
• Identify new capability, run the evaluation and proof of value, and take the technology through deployment into production and steady state service.
• Own your platforms once live, including control health reporting, policy tuning, coverage and continuous improvement.
• Build strong partnerships across business, technology, vendors and industry peers, and govern controls, risks, suppliers and service performance to support regulatory, privacy and PCI DSS obligations.
• Service our Security Operations Centre with the detections and telemetry they need, and partner with Cyber Assurance to keep controls evidenced.

What you will bring

• At least seven years' experience in cyber security, information security or technology risk, including hands-on experience as a security engineer or in a closely aligned technical role.
• Technical Skils: Endpoint Detection & Response (EDR), Identity Threat Detection & Response (ITDR), Network Security, Secure Web Gateway, Email Security, Data Loss Prevention (DLP), Cloud Security, SaaS Security, Security Engineering, SIEM, Security Governance, Cybersecurity, Information Security
• Emergent Tech - AI Detection & Response would be advantageous
• Demonstrated experience owning and operating enterprise security platforms in a business-as-usual environment, with particular strength in endpoint and identity controls.
• Experience securing cloud and SaaS environments, including AWS, Microsoft 365, CSPM and CASB controls.
• Proven experience taking a security technology from evaluation through deployment and into production.
• Experience managing security service providers to agreed SLAs, and supporting security operations with detection content and telemetry.
• Experience conducting cyber security and technology risk assessments, and developing security governance, policies, standards and control frameworks.
• Strong analytical and problem-solving skills, with the ability to translate technical risks into clear business impacts and recommendations.
• Excellent stakeholder management, influencing, advisory and communication skills, including executive-level reporting.
• Strong people skills, ability to connect with others and end to end technical management and precuring the technology into deployment through strong communication and engagement skills
• Experience in large, complex or regulated environments, such as aviation, financial services or critical infrastructure. AI based cyber threat experience is highly advantageous.
• Desirable experience with relevant frameworks and certifications, including NIST, ISO 27001, Essential Eight, SOCI, PCI DSS, CISSP, CCSP or CISM.

Please note: We have more than one opportunity open in Group Cyber Defence! If your background is in API security, DNS or edge protection, see our other Manager Group Cyber Defence advertisement.

Why Qantas?

You’ll join a team where creativity and passion are encouraged. Our people come together to allow us to dream big and deliver successfully.

There are many different opportunities across our team, which means you’ll be able to grow both personally and professionally at Qantas. Your development is a priority for us - so that you can maintain the high standards our customers have come to expect and can continue to develop over time. You’ll be supported from day 1 with on-the-job training and coaching as well as our formal training opportunities. While you may start in this role, we’ve got a great track record of supporting our people to take their career in so many different directions, the destinations are endless.

The Qantas employee benefits program offers amazing benefits that extend well beyond travel.

• We love to travel: Enjoy heavily discounted air travel within Australia and across the globe, both for you and your family and friends, as well as exclusive deals on accommodation and holidays.
• We have flexible leave options: Make use of leave and flexible working opportunities including 18 weeks paid parental leave and the option to purchase additional paid leave for eligible employees.
• We’ll give you access to thousands of rewards: Through our partnerships we can offer you discounts across shopping, food and wine, insurance, health and wellbeing, leisure and entertainment. You can also take advantage of our salary packaging program including motor vehicles, eligible portable electronic devices and professional memberships.
• We’ll support your wellbeing: Whether it’s learning to better support your own and others’ mental health, our interactive wellbeing app or your very own tailored nutrition plan.

Qantas is an equal opportunity employer committed to providing a working environment that embraces and values diversity and inclusion. By coming to work for us, you’ll be part of an organisation that encourages diversity, supports charities and environmental initiatives. We encourage Aboriginal and Torres Strait Islander, and people of all backgrounds to apply. If you have any support or access requirements, we encourage you to advise us at time of application. Your personal information will be kept confidential in compliance with relevant privacy legislation.

Please note: applications will only be considered for candidates who have the right to work in Australia / New Zealand without restriction or sponsorship.

Be part of something special and play your part in the Qantas story - get in touch today!

Applications will close by the 26th of October