Security Engineer

As a Security Engineer at Netwealth, your primary responsibilities will include managing security tooling, overseeing day-to-day alerts, and leveraging Microsoft Defender for detailed investigation of incoming and outgoing data. You will be tasked with designing new security solutions tailored to the organization's needs while adhering to best practices. Additionally, you will operate and administer our operating systems and servers, ensuring the highest levels of security across our infrastructure.

To qualify for the Security Engineer position at Netwealth, candidates should possess extensive knowledge in IT security frameworks and experience managing security incidents from start to finish. A strong technical skill set in Azure Cloud Adoption Framework, CPS234, ISO27001, NIST, and OWASP is essential, along with proficiency in scripting languages like PowerShell and Python. Candidates should ideally be transitioning from a Senior Security Analyst role or already hold an established Security Engineer position.

Essential skills for a Security Engineer at Netwealth include a robust understanding of cloud technologies, particularly Azure, as well as familiarity with security frameworks such as CPS234 and ISO27001. Candidates should also have experience with IaC tools like Terraform and Ansible, and possess scripting skills in PowerShell and Python to implement effective security solutions. Your ability to collaborate with other teams and leverage data-driven insights will further enhance our security posture.

The work environment for a Security Engineer at Netwealth is collaborative and fast-paced, designed to foster creativity and innovation in security practices. You'll be part of a close-knit team focused on maintaining high security standards. Our Melbourne office, located in the heart of the CBD, is equipped with modern facilities to support a hybrid work policy, allowing for flexible arrangements while encouraging team interaction and collaboration.

At Netwealth, we prioritize the growth of our employees through various opportunities for professional development. Security Engineers can expect access to further education, diverse training programs, and the potential for internal mobility; in fact, 32% of our positions in 2023 were filled by internal candidates. We encourage our team members to continuously enhance their skills and advance their careers in a supportive environment.

When answering this question, highlight specific security frameworks such as ISO27001, CPS234, or NIST that you have worked with. Discuss how compliance with these frameworks has informed your approach to designing security solutions and managing incidents, showcasing your understanding of best practices and standards.

Use the STAR method (Situation, Task, Action, Result) to outline an example from your experience. Focus on your process for identifying the vulnerability, the steps you took to address it, and the outcome of your actions, emphasizing the impact on your organization's security posture.

Discuss your methods for staying informed about current security threats, such as following industry news, participating in forums, attending seminars or webinars, and leveraging resources like threat intelligence platforms. Emphasize your proactive approach to learning and adapting to new challenges in the security landscape.

Detail your involvement in managing security incidents, including your role in identifying incidents, coordinating response efforts, and collaborating with teams. Highlight any specific tools you used (such as SIEMs) and the process you followed to resolve incidents effectively.

Share your experience with securing cloud environments, particularly Azure, and the specific tools or services you've utilized. Discuss your familiarity with concepts like the Azure Cloud Adoption Framework, and how you have implemented security best practices in cloud solutions.

Explain your approach to triaging alerts, focusing on how you assess the severity and potential impact of incidents. Share any frameworks or methodologies you've employed to ensure critical security tasks are addressed promptly, highlighting your analytical skills.

Discuss your experience with scripting languages, particularly PowerShell and Python. Provide examples of how you've utilized these languages to automate tasks, enhance security processes, or develop custom solutions to meet security needs.

Talk about your familiarity with IaC tools like Terraform and Ansible, focusing on how these tools contribute to secure configurations and reduce human error. Provide examples of how you've implemented IaC in your previous roles to enhance security compliance and consistency.

Outline your structured process for assessing security needs when designing solutions for new systems. Discuss how you collaborate with stakeholders to identify requirements and how you incorporate industry best practices into your designs to ensure robust security.

Highlight the importance of teamwork in security operations. Discuss your experience in collaborating with different teams, such as IT, development, or operations, to promote security best practices and drive collective ownership of security initiatives. Stress your ability to communicate effectively and facilitate collaboration.