Cyber Security Engineer | WAF & DDoS

Protect platforms that can't afford to go down.

We're looking for an experienced Cyber Security Engineer with deep expertise in Web Application Firewalls (WAF), DDoS protection and internet-facing security controls to join a high-performing cyber engineering team responsible for safeguarding critical digital services used at national scale.

This is not a BAU security operations role. You'll be engineering and enhancing the controls that sit at the edge of a complex, highly available environment where resilience, performance and security are equally important.

What's on Offer

• Up to $180k package (including super)
• 2-year maximum term contract
• Sydney-based role
• Hybrid working model (2 days in the office)
• Specialist cyber engineering team
• High-profile environment with genuine security investment
• Fast 2-stage interview process

What You'll Be Doing

You'll take ownership of the technologies and controls that defend critical applications and APIs from modern cyber threats, including:

• Designing and deploying WAF and DDoS protection solutions
• Building and tuning security policies to stop attacks without impacting legitimate users
• Securing web applications, APIs and internet-facing services
• Investigating attack patterns, traffic anomalies and platform performance issues
• Driving bot mitigation, traffic filtering and threat detection initiatives
• Integrating security platforms with SIEM and monitoring tooling
• Automating security processes using Python, PowerShell, APIs and Infrastructure as Code
• Working closely with cloud, network, application and security teams to improve resilience and security posture across the environment

Tech You'll Likely Be Working With

F5, Cloudflare, Akamai, Imperva, Azure WAF, AWS WAF, Microsoft Sentinel, Python, PowerShell, Terraform, Bicep, REST APIs, CDN technologies and modern cloud platforms.

About You

You'll likely come from a background in:

• Network Security Engineering
• Cyber Security Engineering
• WAF Engineering
• DDoS Protection
• Edge Security
• Cloud Security

You'll have strong hands-on experience protecting web applications and APIs, analysing network traffic, tuning security controls and balancing security with availability and user experience.

Why This Role?

If you're tired of security being treated as a checkbox exercise, this is an opportunity to work in an environment where availability, resilience and cyber security are genuinely mission-critical.

You'll be joining a team responsible for protecting large-scale digital and payment services, tackling complex security challenges and working with technologies that sit on the frontline of cyber defence every day.

Apply now or reach out for a confidential discussion.