Senior Cybersecurity Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Senior Cybersecurity Engineer protecting Voltex Electrical’s electrical wholesale distribution operations. Testing applications, securing cloud and identity systems, and leading incident response remotely from the Philippines.
Responsibilities:
- Manually test public-facing and internal web applications and APIs, including authenticated journeys, authentication, sessions, object and role authorization, tenant boundaries, and business-logic abuse
- Use scanners to support, not replace, manual investigation
- Assess mobile apps, including local storage and logging, authentication and sessions, network trust, platform interactions, and backend APIs
- Review source code, configuration, and designs with developers
- Build threat modelling, security checks, and regression tests into the development lifecycle, including code, dependency, and secrets scanning in CI/CD
- Document reproducible findings and business impact, agree remediation owners and dates, support root-cause fixes, and independently retest fixes
- Track security coverage, overdue risks, and time-bound risk exceptions with the Head of Technology
- Agree written testing scope and authorization, including environments, test accounts and data, production safeguards, and stop conditions
- Protect customer information and avoid disruption during testing
- Own security posture in Microsoft Entra ID and Microsoft Defender, including Conditional Access, MFA coverage, privileged access, and alert routing
- Run incident response from detection through post-incident review
- Review security-relevant application, access, network, and infrastructure changes before release
- Act as named security approver for high-risk changes; arrange separate review of own high-risk changes and escalate unresolved release risks
- Enforce secrets and identity hygiene using Azure Key Vault, managed identities, no embedded credentials, and least privilege
- Investigate account takeover and fraud signals with QA and Customer Service teams
- Run security awareness and phishing resistance programmes for Voltex staff
Requirements:
- Proven, hands-on ability in application security testing and driving fixes through retest
- Web and API security experience investigating and validating weaknesses in authenticated websites, web apps, and APIs, including authorization and business logic
- Experience using an intercepting proxy such as Burp Suite or an equivalent tool
- Hands-on assessment of mobile-client security and backend APIs
- Ability to read source code and configuration, explain root causes, work with developers on fixes, and verify retests and regression coverage
- Experience with .NET/IIS or strong transferable experience
- Experience securing Microsoft Azure workloads and hybrid estates, including on-premises servers and Active Directory
- Entra ID administration, Conditional Access design, MFA rollout, and privileged access management
- Experience with Microsoft Defender and EDR platforms; CrowdStrike experience
- Experience with Intune device management
- Experience with firewalls, segmentation, and SASE/SD-WAN environments; Cato experience
- Incident response experience covering detection, containment, and post-incident write-ups
- Experience using OWASP guidance and ASD Essential Eight or a comparable framework
- Ability to communicate risk in plain business terms
- Ability to work remotely across AU/NZ time zones and operate independently as the sole security specialist
- Nice to have: AZ-500, SC-200, or equivalent experience
- Nice to have: experience securing Databricks or governing AI tool and agent access
- Nice to have: phishing simulation and security awareness programme experience
- Nice to have: deeper native mobile testing, reverse engineering, or commissioning and validating specialist penetration tests
Benefits:
- Fully WFH with flexible working hours
- Paid Parental Leave
- Annual and sick Leave
- 20 Service Inventive Leave (SIL) days per year
- Healthcare - HMO Coverage for up to four (4) dependants
- Monthly food allowance
Similar Jobs
Professional SAP Technology Consultant – Security & Authorizations
SAP Security Consultant managing SAP Basis, authorizations, and S/4HANA transformations. Supporting Axians’ modernization of enterprise digital infrastructures and cloud solutions.
Professional SAP Technology Consultant – Security & Authorizations
SAP Security Consultant operating and transforming SAP landscapes for Axians, VINCI Energies’ ICT services specialist. Designing authorizations, security architectures, and S/4HANA migration solutions.
Professional Consultant, SAP Technology – Security & Authorization
SAP Security and Basis consultant supporting secure operations and S/4HANA transformations. Axians modernizes digital infrastructures for businesses, municipalities, providers, and public organizations.
Senior SAP Security Specialist, m/f/d
Senior SAP Security Specialist leading SAP security audits, consulting projects, and software workshops. Improving SAP security products for customers of German consultancy IBS Schreiber.
Senior Information Security Specialist
Senior Information Security Specialist advancing GRC, third-party risk, compliance, and incident readiness. Supporting Halcyon’s adaptive platform dedicated to stopping ransomware.
Senior Security Control Assessor – FedRAMP 3PAO
Senior FedRAMP assessor leading cloud security compliance audits for Insight Assurance, a global cybersecurity and compliance audit firm. Evaluating NIST controls and mentoring assessment teams.
Junior Information Security and Privacy Consultant
Consultor de segurança da informação e privacidade apoiando assessments, avaliações de riscos e adequação a frameworks. Elaborando relatórios e recomendações para projetos de clientes diversos.
Security Impact Analysis Engineer
SIA Engineer supporting TSA information-system security impact analyses and RMF compliance. Evaluating cybersecurity risks, controls, architectures, and authorization documentation for Titan Technologies.
Senior Security Control Assessor, SCA
Senior Security Control Assessor supporting TSA’s cybersecurity governance, risk, and compliance mission. Evaluating security controls, authorization packages, vulnerabilities, and remediation activities.
Senior Cybersecurity Engineer, TS/SCI Clearance Required
ACAS cybersecurity engineer managing Nessus-based vulnerability assessment and DoD compliance. Supporting Air Operation Center cybersecurity, remediation, and incident reporting.
Head of Cyber Security
Head of Cyber Security leading cybersecurity strategy and governance for ABB’s global Process Control Platform. Protecting automation products through risk management, compliance, Linux and Kubernetes expertise.
Staff Product Security Engineer
Staff Product Security Engineer leading penetration testing across Guidewire’s cloud insurance platform. Securing web applications, APIs, SaaS architectures, and AI-powered product features.
Information Systems Security Officer
Information Systems Security Officer leading RMF authorization and cybersecurity compliance for federal on-premises and AWS systems. Managing eMASS, STIGs, vulnerability remediation, and continuous monitoring.
Staff Security Engineer – AppSec
Staff AppSec Engineer definindo segurança para produtos de pagamentos da Stone, incluindo aplicações com LLMs e IA generativa. Proteção de APIs, cloud, CI/CD e sistemas de produção.
Security Engineer II
Security Engineer securing Iovance’s cloud, identity, endpoint, email, and DevSecOps platforms. Supporting audit-ready security operations for a company developing TIL cancer therapies.
Application Security Developer III
Application security developer securing CareSource web, mobile, and service applications. Testing vulnerabilities, reviewing code, and automating security tools and processes.
Security Engineer – Agentic AI
Security Engineer securing agent gateways, tools, models, and data flows. Building production controls for BRAHMA AI’s enterprise media technology platform.
Senior Cybersecurity Specialist
Abbott Senior Cybersecurity Specialist conducting threat modeling and risk assessments. Securing healthcare product architectures and supporting regulatory cybersecurity activities.
Oracle Cloud Security Expert
Oracle Cloud Security Expert designing and implementing Oracle SaaS security controls for Highstreet. Managing roles, audits, access governance, patch testing, and compliance.
Security Specialist
Security Specialist conducting NIST-based vendor risk assessments for North Carolina government IT. Delivering inventories, risk registries, and assessment reports.