Senior Cyber Security Engineer in North Sydney

About CNS

CNS is a Managed Service Provider that has been in the market since 1988. We deliver Cloud, Network and Cyber Security solutions to organisations in Australia and overseas. As a Microsoft Solutions Partner and ISO 27001 certified organisation, CNS already has a strong toolset, process framework, and client and partner relationships in place. We employ more than 80 people globally. Our Professional Services practice designs and delivers security projects for our clients.

Position Overview

• Location: North Sydney, NSW
• Employment Type: Full time
• Hours: 8:00 AM to 5:00 PM
• Reporting To: Head of Professional Services
• Direct Reports: None

You will review and mentor the work of other resources.

Work Arrangement

CNS has an in-office first culture. You work from the office full time during onboarding. Once settled, one day per week working from home is encouraged. An ad hoc flexibility process covers additional arrangements. Availability outside core hours is part of the role during critical go-live events and major incidents. Advance scheduling and compensatory time apply per CNS policy.

Your Mission

Own the security design and delivery of your client engagements by:

• Designing defensive security architecture, with decisions and trade-offs recorded.
• Implementing security controls across identity, endpoint, cloud and network.
• Leading the security workstream through to a documented handover to Operations.
• Reviewing the security designs of other resources and holding the quality bar.
• Acting as the trusted security contact for your clients.

What You'll Be Doing

Security Architecture and Design Assurance

• Design defensive security architecture for client engagements.
• Maintain reusable reference architectures and baselines so design is consistent across clients.
• Review designs from other resources before build and give clear approval or required changes.
• Run threat modelling for high-risk designs and make sure each attack path has a control and a detection.

Security Implementation and Delivery

• Implement security controls across identity, endpoint, cloud and network that pass peer review first time.
• Lead the security workstream on client engagements.
• Hand over to Operations only when documentation and runbooks are complete.
• Own the security risk register and flag at-risk items to the Head of Professional Services within 24 hours.
• Approve security-impacting change records, with tested rollback plans.

Security Assessment and Advisory

• Run security reviews and posture assessments of client environments.
• Present prioritised, costed recommendations.
• Shape security roadmaps and maturity uplift plans that clients can fund and sequence.
• Improve detection coverage by designing logging, tuning analytics and mapping coverage to attacker techniques.
• Turn threat intelligence and vendor changes into action for clients and the team.

Incident Support and Resilience

• Act as an escalation point for Operations on security incidents, with containment advice and written root cause analysis.
• Turn incident findings into design, detection or hardening improvements.
• Build incident response playbooks and run tabletop exercises with clients.

Client Trust and Commercial Contribution

• Set and reset expectations early when scope or risk changes.
• Help pre-sales by scoping security work, checking statements of work and flagging delivery risk before commercial sign-off.
• Raise scope variations as approved, billable changes in PSA before work starts.
• Keep timesheets accurate and billable hours on target.

Documentation and Knowledge

• Deliver design documents, implementation records, runbooks and closure reports to CNS standards.
• Keep architecture diagrams and baselines current for each client environment.
• Publish knowledge base articles that cut resolution time for the wider team.

Team Capability and Practice Uplift

• Mentor other resources through design reviews, structured guidance and direct knowledge transfer.
• Lead peer review of high-risk security changes.
• Build automation and process improvements that raise delivery quality.
• Model CNS security policy and ISO 27001 practice in daily work.

This Role Is For You If...

You will thrive in this role if you:

• Have 5+ years in a security engineering or security consulting role, with evidence across engagements.
• Hold a diploma or degree in IT, cyber security or a related field, or have senior-level industry certifications that show the same level of knowledge.
• Have worked in an MSP, consulting or multi-client environment.
• Have designed and implemented security solutions across Microsoft 365, Azure and network security platforms.
• Have advanced hands‑on skills in the Microsoft security platform: Entra ID, Conditional Access, Privileged Identity Management, Defender for Endpoint, Defender for Cloud, Intune, Sentinel, Defender XDR and KQL.
• Have working capability in Fortinet and Palo Alto firewalls, Tenable, Microsoft Purview, PowerShell, Bicep and Azure DevOps.
• Know Zero Trust architecture, threat modelling and MITRE ATT&CK coverage mapping.
• Can map controls and evidence to ISO/IEC 27001, NIST CSF, the ACSC Essential Eight and the Australian Government ISM.
• Write design documents and delivery artefacts that clients accept with minimal rework.
• Have mentored other engineers and raised the quality of their output.
• Communicate openly and honestly with stakeholders at all levels, including when the message is uncomfortable.
• Take full ownership of outcomes and see work through until the result is right.
• Use AI tools well to solve new problems, check the output, and share useful workflows with the team.
• Hold, or are willing to obtain, at least four of these certifications: SC-200, SC-300, SC-401, SC-100, Fortinet Certified Solution Specialist - Network Security, PCNSE and CISSP.

Why Join CNS

• Own the security outcome on your engagements.
• Work on the highest-risk security engagements in the business.
• Shape how the Security practice delivers.
• Build on a strong toolset, process framework and set of client relationships.
• Work in a team where teamwork is our superpower.
• Get dedicated study time and full cost coverage for training and certifications.
• Find opportunity beyond this role.

Rewards and recognition: peer-nominated and performance-based awards, paid as you accomplish them. Annual wellbeing allowance for health, fitness or personal well-being. Salary sacrifice, including novated lease and individual item options. Paid training and certifications, with dedicated study time. One work-from-home day each week after onboarding.

Our Values

• Be a Visionary: Innovation drives everything we do.
• Be a Legend: Deliver exceptional customer outcomes.
• Be a Teammate: Collaboration is our superpower.
• Be Your Best: Pursue excellence every day.

Ready to Own the Security Outcome?

If you design security that clients trust and you want to lift the engineers around you, we want to hear from you. Join CNS and help shape how our Security practice delivers.