At SBS, we embrace difference, and we welcome applications from people of all backgrounds.

We also acknowledge the unique contribution that Aboriginal and Torres Strait Islander peoples make to our society and our workplace through their enduring and continued connection to land, sea, sky and community.

This role is classified as Level 6 Business Support role under SBS Australia's current Enterprise Agreement (with annual base salary range of $126,040 - $149,824). The successful applicant will be offered remuneration that is commensurate with their skills and experience and in alignment with this framework.

About Us

SBS is one of the world's most unique and innovative media organisations, producing trusted, meaningful, and engaging content that exists for all Australians to inspire, support and celebrate the diversity of our multicultural society. 

Our purpose, for the last 50 years, has reflected and explored the evolving diversity of Australia, investing in initiatives to deepen its connections with communities, sharing their stories and giving a voice to those often unheard, with the aim of increasing understanding and respect of the differences that make up Australia.

SBS is a truly distinctive network, showcasing multicultural, multilingual and First Nations stories otherwise untold in the Australian media.

Please note: As part of the hiring process, candidates will require to undergo a security background check. 

The Department

SBS Technology can be thought of as the 'engine room' of SBS. Our primary role is to enable and support the production, distribution, and transmission of content across television, radio, and online platforms. Our teams achieve this by working collaboratively to design innovative solutions and deliver end-to-end services for our business stakeholders.

About The Role

The Cyber Security Engineer - Security Operations plays a key role in the design, deployment, automation, and ongoing management of security technologies across the organisation. This role will have you working across Elasticsearch SIEM, CrowdStrike EDR, Microsoft 365/EntraID security, AWS cloud security, and a range of interesting security uplift projects slated for now and the future.

The successful candidate will bring experience in supporting multiple cyber solutions concurrently, along with excellent communication skills and a keen interest in working across all facets of cyber security.

In addition to project delivery, this role includes hands-on involvement in security operations and alert response with participation in an emergency response on-call roster.

If you thrive on variety, love problem solving, and are keen to be a part of a small team invested in the cyber resilience of Australia’s most trusted multilingual broadcaster, then this is your chance to make a difference.

Key Responsibilities

• Manage and deploy Elasticsearch SIEM components, Elastic Agent and security integrations including creating and tuning security detections, alerts, and dashboards.
• Manage, deploy and monitor CrowdStrike Falcon EDR, ensuring optimal security posture across endpoints.
• Manage and secure Microsoft 365, EntraID security features, including Defender for Office 365 and Conditional Access Policies.
• Take the lead in the design and deployment of cyber uplift projects across centralised endpoint management and identity and access management.
• Ensure Active Directory security is maintained and benchmarked against best practice initiatives.
• Monitor AWS security services such as GuardDuty, Security Hub, and CloudTrail for suspicious activity.
• Monitor and respond to security alerts and incidents.
• Support security risk assessments and contribute to vulnerability management efforts.
• Maintain and update security software documentation, incident playbooks, and response procedures.
• Leverage PowerShell, Python and Power Automate to streamline security response workflows.
• Act as a key technical resource for security improvements across the organisation.

About you

We are looking for someone with below (essential):

• Experience in a similar Engineering role with an analytical background.
• Proficiency in managing SIEM components (preferably Elasticsearch and Elastic Stack).
• Knowledge of security frameworks such as NIST, ASD Essential 8, and MITRE ATT&CK.
• Ability to work and troubleshoot independently and contribute to security automation projects.

 Further Desirable Requirements

• Certification in Elasticsearch (Elastic Certified Engineer or Analyst).
• SANS GCFA (Certified Forensic Analyst) or similar security certification.
• Experience with network security and firewall management.
• Experience working in a Security Operations Centre (SOC) environment