As a senior member of the team, you will provide technical leadership, mentor junior analysts, and contribute to the protection of Service Stream's IT and Operational Technology (OT) environments. You will play a key role in ensuring security is embedded into the design, implementation, and operation of business systems and services and will have a well-developed knowledge and experience in cyber security operations within the context of a large Defence Industry company.
Location: Melbourne CBD (Collins Street) with a hybrid work arrangement of 3 days in the office and 2 days from home.
Work type: full time permanent.
Role requirements: Applicants must be Australian Citizens and eligible to obtain and maintain an Australian Government Security Clearance (Baseline or NV1, depending on operational requirements).
What you’ll do
Cyber Security Operations
- Investigate and respond to security alerts and incidents
- Manage Security Operations Centre (SOC) activities
- Support identity and access management
- Administer and optimise security technologies including SIEM, SOAR, email security, endpoint protection, and privileged access solutions
- Conduct threat hunting, threat intelligence analysis, and threat modelling activities
- Support phishing simulations, incident response and exercises, and security monitoring capabilities
In All Roles
- Contribute to cyber security audits and compliance activities
- Participate in incident management, security exercises, and working groups
- Prepare technical reports, security procedures, and operational documentation
- Support continuous improvement initiatives across security controls, policies, and processes
- Share knowledge and mentor less experienced team members
- Assist with additional security responsibilities as required
What You'll Bring
- Demonstrated experience in Cyber Security within Cyber Security Operations
- Experience working within Defence, Critical Infrastructure, or similarly regulated environments
- Strong understanding of cyber security frameworks and standards such as: ACSC Essential Eight, Information Security Manual (ISM), NIST Cyber Security Framework, ISO 27001, MITRE ATT&CK Frameworks
- Experience with cyber security service management, workflow management, and reporting tools
- Hands-on experience with security technologies such as: Splunk, CrowdStrike, Check Point, Zscaler, Service Now, Jira or similar platforms
Qualifications
- Degree in Cyber Security, or a related discipline, or equivalent industry experience
- Industry certifications and security-focused training highly regarded
- Vendor certifications and product-specific training advantageous
About Us
Service Stream is an equal opportunity ASX-listed organisation that develops and operates Australia's essential service networks across telecommunications, utilities, transport, defence and social infrastructure. Our work supports and connects communities across the nation.
Benefits of Working with Us
- Growth – Build your technical capability across cloud, infrastructure, security and modern workplace technologies.
- Discounts – Access to hundreds of retail and service discounts including Woolworths, JB Hi-Fi, Airbnb and Bupa.
- Paid Leave – Parental, cultural, community service, study, corporate volunteering and purchased leave options.
- Culture – Join a team that values accountability, collaboration, inclusion and continuous improvement.
How to Apply
Please submit your interest using the Apply button, where you will be directed to create a profile on our system.
We celebrate diversity at Service Stream and welcome applications from Aboriginal and/or Torres Strait Islander peoples, people with disability or neurodivergence, and those from LGBTIQA+, Veteran or other diverse groups.
Applications will not be accepted via email. If you require reasonable adjustments to the recruitment process, please email [email protected].
If this sounds like you apply now to the Service Stream Recruitment Team via the online application button.
Skills Required
- Knowledge and experience with identity and access management processes, including provisioning, de-provisioning, access controls, identity governance, and role-based access controls
- Familiarity with Active Directory, Azure Active Directory, and privileged account management processes and tools
- Understanding of AWS and Azure cloud platforms and their identity and security capabilities
- Technical knowledge of SIEM and security analytics solutions, particularly Splunk and Splunk SOAR
- Knowledge of VPNs, storage services, and Windows operating systems
- Experience with non-Windows operating systems
- Experience with Check Point, Zscaler, CrowdStrike, or Palo Alto firewalls
- Experience working in an ITIL-compliant environment, including incident and change management processes
- Knowledge of ISO 27001, NIST, and Essential Eight security frameworks and standards
- Ability to identify automation and scripting opportunities to improve security operations
- University degree in Cyber Security, Information Technology, Computer Engineering, or a related field
- Microsoft and/or AWS security certifications
- Splunk or SIEM-related training or certifications
- ITIL certification
- CompTIA Security+ or another recognized cybersecurity certification or training
What We Do
Service Stream is an S&P/ASX 300 listed business that specializes in the design, construction, installation, operation, and maintenance of critical assets across Australia's essential infrastructure networks. The company provides integrated end-to-end asset life-cycle services, primarily focusing on the provision of telecommunications and network services to keep Australian communities connected.
