Australia Job Openings

Metcash

Senior Security Operations Engineer

September 20, 2024

Joining the Metcash Family
At Metcash, you’re part of something bigger. You have all the perks of a small business heart, without missing out on the big business support.
Being part of something bigger means you’re part of a strong purpose, where the work you do makes a big difference to independent business and local communities. It opens a sea of opportunities to develop yourself, grow your career, thrive your way and make your mark. And you’ll be part of our high performing team, where you reap the rewards of our collective success now and into the future.

About the Opportunity
Exciting opportunity to be a part of our growing Cybersecurity team. This is a newly created role that will be responsible for the technical leadership that safeguards Metcash’s information systems and infrastructure by designing, implementing, and managing security systems and controls.
This role leads the operational monitoring and response to security incidents, analysing and enhancing existing security protocols, and ensuring compliance with industry standards and regulations.

In this Role

Cloud Security Posture Management - Use, manage and improve Azure Security controls and other Microsoft cloud security tools to continuously monitor and assess the security posture of 365 and Azure environments.
Incident Response -Lead and coordinate responses to security incidents across on-prem and cloud environments, including containment, eradication, and recovery efforts.
Vulnerability Management - Conduct regular security assessments and vulnerability scans on IT and OT resources across Metcash and its subsidiaries to identify and address security weaknesses.
Access and Identity Management - Help manage security and controls for Azure Active Directory (Azure AD) and Privileged Access Management (PAM). Monitor and review access controls and permissions to ensure compliance with security policies.
Compliance and Governance - Ensure technology environments comply with industry standards and regulations including SOCI, ASD Essential 8 and NIST.
Security Configuration and Hardening - Drive adherence to security configurations and hardening practices for Azure resources and related landing zone guard rails. Manage and support network security and secure service edge controls.
Threat Intelligence and Analysis - Contribute to ongoing IOC gathering and investigation with internal teams and MSSP vendors. Respond to Phishing and BEC requests and escalations.
Security Automation - Collaborate with Devops teams and MSSP vendors to develop and maintain automated security workflows and playbooks using Azure Logic Apps, Azure Automation, or other security-as-code mechanisms.
Collaboration and Training - Provide subject matter leadership with Dev Ops, IT operations, and technology project teams.
Documentation and Reporting - Maintain comprehensive documentation (including reporting) of security configurations, incidents, and remediation efforts.

You’re Likely a Match If

Minimum 10 years’ experience in security operations technical capacities.
Industry experience in Logistics/Supermarket/Retail/Wholesale or Critical Infrastructure is highly regarded.
Experience building Azure security practices (Dev Ops, Dev Sec Ops)
Experience in incident response coordination
Vendor management and SLA oversight experience
OT Security experience will be well regarded.
Bachelor’s degree in information technology, cyber security, or related field.
Experience in technical leadership of SOC operations teams.
Relevant security certifications such as CISSP, MS Security Operations Analyst (SC-200), MS Identity and Access Admin(SC-300), MS Azure Security Engineer Associate (az-500).
Thorough knowledge of blue team operations and continuous defensive posture management.
Demonstrable knowledge of ASD Essential 8 security controls and enforcement – patching, MFA, whitelisting, MS Office security and ASR rules etc.

Technical Knowledge

MS Azure and Defender 365 expertise. (sc-200, sc-300, az-500 qualifications preferred)
Microsoft, Unix, Linux operating systems and Endpoint Security
Application whitelisting controls and technical management best practices.
Certification Management and CA Management
Bicep infrastructure-as-code fundamentals and experience – Knowledge of Dev Sec Ops processes.
Identity and access management – Conditional Access, PAM/Thycotic.
Pen test remediation and ongoing risk management processes.
Vulnerability Management and remediation – Qualys, 365 Security recommendations, threat intel feeds etc
Secure Service Edge – SWG, Secure Remote Access and CASB using Zscaler.
Security Information Event Management (SIEM) systems – Log source testing/verification, ongoing use case validation.
Network security – FW, Load Balancer and ZTNA experience.
ITIL and IT Service Management.

Life at Metcash
Experience a supportive and flexible work environment. We are a Flex Ready accredited workplace!
Enjoy a 5th week of annual leave every year after your first year.
Benefit from 2 well-being days and 1 volunteer day annually.
An abundance of learning, development, and career growth opportunities.
12 weeks of gender-neutral paid parental leave for primary carers.
Proudly awarded “Bronze Employer for LGBTQ Inclusion”.
Recognised as 45th in the global "Equileap Top 100" for initiatives on gender equity.

️A neutral gender pay gap of under 5% as published by WGEA 2022- 2023

Gold accreditation by Mental Health Australia.
Incredible value discounts and perks through our team member app, “Our Local”.

About Us
Metcash is Australia’s leading wholesale distribution company, with revenue 1 exceeding $18 billion in FY23. We’re also an ASX top 100 listed company.
We believe that it is absolutely vital to Australia that there is a sustainable, independent, family-owned business sector. Independent retailers support their local communities. We help them to be the ‘Best Store in Their Town’ by providing merchandising, operational and marketing support across our food, liquor and hardware pillars.
We're dedicated to fostering diversity and inclusion in our workplace and are proud to be an equal opportunity employer. Joining our team means becoming part of something bigger, a company that actively promotes diversity, champions charitable causes, and supports environmental efforts. We welcome applications from individuals of all backgrounds, including First Nations. If you have any specific support or access needs, please don't hesitate to inform us when you apply. Rest assured; your personal information will be handled with the utmost confidentiality in accordance with applicable privacy laws.

Join us and be part of something bigger!

#LI-KS1
#INGF

New Job Alerts

Stamford Hotels & Resorts

Reservations Agent

Brisbane

FULL TIME & PART TIME & CONTRACT

September 23, 2024

View Job Description

El Jannah Campbellfield

Crew Members - El Jannah Campbellfield

Campbellfield

CONTRACT

September 23, 2024

View Job Description

IKEA

Fulfilment Operations Co-worker

Springvale

PART TIME

September 23, 2024

View Job Description

Nepean Blue Mountains Local Health District

Occupational Therapist Level 1/2 – Homelessness Mental Health Team

Penrith

FULL TIME

September 23, 2024

View Job Description

Infosys Singapore & Australia

Integration Architect

Senior Clinical Research Associate - Australia - Home-based

CONTRACT

August 27, 2024

View Job Description

Swinburne University of Technology

Senior Research Fellow - Space Materials, Coatings and Manufacturing

Melbourne

August 28, 2024

View Job Description

AKQA

Senior Experience Designer

Sydney

August 28, 2024

View Job Description

Energy Projects Australia

Senior Recruiter