21 Security Consultant jobs in Australia

The work we do matters

We protect and defend our customers and communities by providing the widest range of cyber security professional services in the region.

With more than 1,400 team members across Australia, New Zealand, the UK and US, we are a leading force in cyber security, offering services from strategy, GRC, managed security services, cloud security, digital forensics and cyber education.

If you’re ready to work with teammates that get you, a leader that supports you and customers that need you, then you’re ready for CyberCX.

Unimagined opportunity with our Security Testing & Assurance team

On our team, you get access to an unmatched range of customers, work on unique projects and do it while working alongside some of the best in the industry.

If you’re keen to get out from behind a desk, we also test hardware (think ATMs, medical devices, satellites, and various operational technology) and we put our customers to the test with social engineering, red teaming, and physical penetration testing.

We celebrate our craft (think Hack of the Month), share our discoveries (internal conferences where we share our research) and you’ve probably seen our team at local meet ups and cons because we support and encourage them to get involved.

What This Role Involves

As a security consultant your responsibilities are to deliver on security testing engagements, grow your consultancy skills, progress your technical skillset and positively contribute to our culture.

Day to day you will:

Conduct security tests on customer information systems, infrastructure, software, network - remotely or onsiteProvide robust and considered remediation advice that addresses security weakness and improves security postureDevelop metrics to enable our customers to make informed decisions about the posture of their environment.


Skills and experience

This role requires full working rights in Australia (no current or future sponsorship).

A minimum of two years as a security testing/cyber practitioner in which you have developed capability in managing client expectations, your time, technical security testing, and report writing.

Working knowledge of web application and network security, with hands-on experience in manual testing techniques and the use (and limitations) of automated scannersEffective stakeholder engagement and communication skillsStrong analytical and problem-solving skillsKnowledge of various operating systems and networks, especially Linux, Windows, and Active DirectoryRelated certifications such as OSCP, CREST CCT (Applications or Infrastructure), SANS or other (apply even if you’re still working towards any of these)Experience with cloud and container technologies like AWS, Azure, or Kubernetes is a plusProficiency in a programming language such as Python, Java, JavaScript, or C++ would be great


Interested but don’t meet every item listed above? If you’re excited about this role but your experience doesn’t align precisely, please still apply. You could be just the right person for this role and CyberCX.

Great advantages for great people

A salary package that recognises your experience plus a range of advantages (just some of which are listed below – ask us for a benefits brochure).

Flexible working in a hybrid arrangement (a blend of office and WFH) with modern and comfortable workplaces that accommodate different working stylesSalary packaging options (such as a novated car lease)Health & Wellbeing program including access to our employee assistance service, mental wellness leave, online CyberCX Wellbeing Centre and workplace mental health first aidersDiscounts on health insurance and gym membership plus savings on everyday groceries, electronics, technology, fuel, travel and morePersonalised development planning, access to training and membership to industry organisations


Be yourself.

We embrace diverse perspectives, experiences, and backgrounds. Please let us know if you require additional support or adjustments to assist with your recruitment experience.

We take security seriously.

We require all employees to complete background checks (including police and global sanction list checks) annually.

Where appropriate, the CCX Talent Team will work with our preferred panel of agencies. Fees will not be paid for unsolicited resumes that are submitted directly to hiring managers and not through our approved process.

**Introduction**
A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe. You'll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio; including Software and Red Hat. Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role, you'll be encouraged to challenge the norm, investigate ideas outside of your role, and come up with creative solutions resulting in ground breaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.
**Your role and responsibilities**
We are seeking a highly skilled and experienced SAP Security Authorisation Lead specializing in SAP HANA Application Security. The successful candidate will be part of our dynamic team, working on complex projects to ensure robust security measures for our clients' SAP HANA environments.
Responsibilities:
* Strong knowledge in SAP Security role build process across multiple SAP platforms. Ability to do role design and analysis and lead workshops with business and Process Architects
* Familiar with SAP IdM and general administration within SAP IdM toolset
* Be prepared to understand, investigate and develop new roles, groups, teams within the SAP Cloud Solution
* Integrate the new roles, groups, teams within the SAP Cloud to the rest of the SAP roles and access design.
* Strong problem solving skills to drive resolution of defects and issues by understanding client needs and presenting options to resolve the problem.
* An ability to identify, develop and implement solutions to gaps to meet the needs of the business
* Excellent leadership, communication (written and oral) and interpersonal skills
* Proven ability to deliver high profile activities to tight timescales
* Proven success in contributing to a team-oriented environment
* Strong stakeholder management skills
**Required technical and professional expertise**
* Strong presentation skills
* Client Relationship and engagement
* Willing to take on challenges in new areas at new clients
* Team lead or project management aspirations in combination with a strong drive to develop as a functional consultant
* A drive to expand your network in the SAP community
* Ambition, excellent leadership skills and a talent for building successful client relationships will be highly valued.
Applicants must have an active NV1 AGSVA clearance or can achieve NV1 clearance.
IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

Position Summary & Primary Objectives

Reporting to the Managing Security Consultant – STAor Team Lead – STA, the Senior Security Consultant – STA is responsible for carrying out penetration testing and technical security assessments against complex environments and providing security expertise to CyberCX clients.

The Senior Security Consultant – STA contributes to pre-sales by undertaking scoping activities, and support less experienced members of STA.

Key Roles & Responsibilities

Deliver application, network, systems, and infrastructure penetration tests for customers, specifically those with large or complex testing requirements. Perform the top five and emerging STA services offered by the Practice to a high standard, as well as most of the other services in the services cataloguePrepare high quality reports detailing security issues, making recommendations, and identifying solutionsBuild and promote strong, long-lasting relationships with a diverse range of customers, and identify and explore opportunities within existing and new customersEngage with Customer Sales and Customer Solutions team in a pre-sales capacity to assist with scoping, costing, proposals, RFQs and tendersLead discussions with customers including kick-off meetings, regular updates, and present back on testing performed, key results, recommendations, and the next stepsEnsure that KPIs around client expectation management, delivery deadlines, quality of work and deliverables etc are met, including conducting quality managementShare knowledge with, coach and mentor others in STA to enable learning, development, and capability uplift and to build a high performing teamCreate a culture of empowerment, collaboration, and accountability through consistent employee engagementAssist with R&D, innovation, and practice improvement activities, ensuring R&D and innovation are at the centre of what we do


Preferred Qualifications, Experience & Skills

Tertiary qualification in information systems, software development or a similar field, or equivalent industry experiencePenetration testing certifications such as SANS, OSCP, CREST CCT (Applications or Infrastructure) or other (preferred but not essential)A minimum of 4 years as a security testing practitioner / cyber practitionerStrong stakeholder engagement and communication skillsStrong analytical and problem-solving skills, and the ability to build sustainable, scalable solutions and processes to meet complex operational problemsSkilled in responding to setbacks in an agile and resilient manner


Personal Attributes

Professional and ethical, you inspire trust and confidence through integrity and respectCustomer-obsessed and a self-starter, you go above and beyond to deliver extraordinary results and experiences for customersInnovative and open to change, you are focused on finding opportunities for continuous improvement and ways to optimise work processesCollaborative and with an enterprise mindset, you speak up and welcome all input, opinions, and questionsEmotionally intelligent, you demonstrate empathy, connection, and assertiveness


About CyberCX

CyberCX is the leading independent cyber security services organisation in Australia and New Zealand. CyberCX is Australia’s greatest force of cyber security professionals.

CyberCX has united the country’s most trusted cyber security companies to deliver the most comprehensive end to end cyber security services offering to Australian enterprises and governments.

We are cyber security experts first and foremost. We’re a unified team of highly qualified, certified and skilled professionals working together on the same mission: to protect and defend Australian organisations from cyber threats.

We specialise in: Strategy & Consulting | Governance, Risk & Compliance | Security Testing & Assurance | Identity & Access Management | Security Integration & Engineering | Managed Security Services | Digital Forensics & Incident Response | Cyber Capability, Education & Training

Position Summary & Primary Objectives

Reporting to the Team Lead – AppSec, the ‘Security Consultant, Application Security - STA’ is responsible for delivering high quality application security consulting services to CyberCX clients.

They play a critical role in supporting Application Security program of works to help organisations build and maintain secure applications and mature their Secure SDLC processes.

Key Roles & Responsibilities

Deliver Application Security services such as threat modelling, Secure SDLC reviews and secure development training to organisationsBuild out and promote strong, long-lasting relationships with a diverse range of customers, and identify and explore opportunities within existing and new customers.Act as a subject matter expert and technical leader both within STA and externally across practice for Application Security services.Prepare high quality reports detailing security issues, making recommendations, and identifying solutions, and lead presentations and discussions with customers around Application Security work performed, key results, strategies, processes recommendations and next steps/roadmap to successEnsure that KPIs around client expectation management, delivery deadlines, quality of work and deliverables etc are met, including maintaining visibility of project budget vs actual delivery time and flowing up deviations.Assist with the development of standardised methodologies, identifying and building tools, and improve processesAssist with R&D, innovation, and practice improvement activities


Preferred Qualifications, Experience & Skills

1+ years of experience in relevant areas such as application security, product security, penetration testing, DevOps and/or software development, including but not limited to the following:Conducting threat modelling exercises and design reviewsBuilding, supporting and implementing automated security testing toolsImplementing DevSecOps processes and managing CI/CD pipelinesConducting secure code reviews for various languages and frameworksPerforming Secure SDLC and Secure DevOps reviews against industry standards such as OWASP SAMM and NIST SSDFExperience with containerisation and Infrastructure as Code (IaC)Tertiary qualification in information systems, cyber security, software development or a similar field, or equivalent industry experienceStrong stakeholder engagement and communication skills with an ability to build credibility with senior leaders and internal working teams

Personal Attributes

Professional and ethical, you inspire trust and confidence through integrity and respectCustomer-obsessed and a self-starter, you go above and beyond to deliver extraordinary results and experiences for customersInnovative and open to change, you are focused on finding opportunities for continuous improvement and ways to optimise work processesCollaborative and with an enterprise mindset, you speak up and welcome all input, opinions and questionsEmotionally intelligent, you lead with empathy, connection, and assertiveness


About CyberCX

CyberCX is the leading independent cyber security services organisation in Australia and New Zealand. CyberCX is Australia’s greatest force of cyber security professionals. CyberCX has united the country’s most trusted cyber security companies to deliver the most comprehensive end to end cyber security services offering to Australian enterprises and governments.

We are cyber security experts first and foremost. We’re a unified team of highly qualified, certified and skilled professionals working together on the same mission: to protect and defend Australian organisations from cyber threats.

We specialise in: Strategy & Consulting | Governance, Risk & Compliance | Security Testing & Assurance | Identity & Access Management | Network & Infrastructure Solutions | Managed Security Services | Cloud Security & Solutions | Digital Forensics & Incident Response | Cyber Capability,

Education & Training

**Who We Are**
At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.
**The Role**
As a Senior Security Operations Consultant you will help Australian clients strengthen their security operations by designing, implementing, and improving their SOC capabilities. You will be responsible for leveraging industry-leading **SIEM solutions** such as **Splunk** , **Sentinel** , **Cortex** , or other security monitoring tools. Your key focus will be on enabling **advanced threat detection** , improving incident response workflows, and ensuring that SOC teams are properly trained and supported.
You will be responsible for guiding clients on meeting compliance and regulatory requirements on security detection and response capabilities. This role requires deep expertise in Australian industry-specific requirements for **government agencies, financial institutions** , and critical infrastructure sectors.
Collaboration will be your forte, as you work closely with clients to understand their unique security requirements and assess their current security posture. Armed with this knowledge, you'll provide expert guidance and recommendations on the best security practices, risk management strategies, and robust security policies that will fortify their defenses.
You won't stop at providing advice; you'll roll up your sleeves and get hands-on. Designing and implementing security controls, policies, and procedures will be your playground. You'll work alongside cross-functional teams to deploy state-of-the-art technologies, including firewalls, intrusion detection/prevention systems, access controls, and encryption technologies, ensuring a comprehensive security framework.
The thrill of uncovering vulnerabilities and risks is what motivates you. Armed with your extensive knowledge, you'll conduct thorough security assessments, leaving no stone unturned in identifying potential security breaches. Your findings will serve as the foundation for meticulous security audits and reviews, ensuring adherence to policies and procedures. Your reports and findings will be the catalyst for management decisions and actions.
In the fast-paced world of cybersecurity, staying ahead of the game is crucial. That's why you'll continuously immerse yourself in the latest security threats, technologies, and best practices. Your recommendations will drive enhancements to the organization's security posture, ensuring it remains at the cutting edge of defense.
Your influence won't be limited to systems alone. You'll lend your expertise to the design and review of IT infrastructure, systems, and applications, ensuring they are secure by design from inception.
Not only will you make an impact within our organization, but you'll also collaborate with customers and vendors on security assessments, audits, and due diligence activities. Your knowledge and experience will be instrumental in shaping secure collaborations and partnerships.
Our consultants are restless for innovation. They are at the edge of technology, changing the way our customers implement business solutions - so, if you're a problem-solver, an innovative thinker, and a self-starter with a passion high impact assignments which align technology to business outcomes, then we want to hear from you! Apply today to join our team that has a host of exciting projects and customers waiting for you to work with them to solve complex transformation puzzles through technology.
Your Future at Kyndryl
As a Security Consultant at Kyndryl you will join the Kyndryl Consultant Profession, working with other Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts - presenting unlimited opportunities with unmatched support through our investment in your learning, training, and career growth
**Who You Are**
You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.
**Required Skills:**
· Expertise in **SIEM** tools such as **Splunk** , **Sentinel** , **Cortex** , or other security monitoring tools.
· Strong knowledge of **Australian cybersecurity regulations** such as **Essential Eight** , **ASD's Strategies to Mitigate Cyber Security Incidents** , and **ACSC Cyber Threat Reports** .
· Experience in designing and implementing **SOC** processes, including incident detection, response, and recovery.
· Familiarity with **Australian Data Breach Notification (NDB)** scheme and **incident response protocols** .
· Strong understanding of **advanced threat detection** techniques such as **behavioral analytics** , **AI/ML-driven threat hunting** , and **threat intelligence feeds** .
· Experience in leading and mentoring SOC teams, ensuring continuous improvement in detection and response capabilities.
**Required Experience:**
· 8-10 years of experience in security operations, with a focus on **SOC** management and **incident response** .
· Proven experience working in **Australian market** with specific knowledge of **ACSC** guidelines and **Australian regulatory requirements** .
· Experience working in highly regulated industries (e.g., **banking, critical infrastructure, government** ).
· Certifications such as **CISSP** , **SANS GIAC** , and **SOC certifications** (e.g., CSIRT, GSEC) are highly desirable.
+ Australian Citizen with the ability to obtain AGSVA security clearance.
**Being You**
Diversity is a whole lot more than what we look like or where we come from, it's how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we're not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That's the Kyndryl Way.
**What You Can Expect**
With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter - wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.
**Get Referred!**
If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.
Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

**Who We Are**
At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.
**The Role**
As a Senior Security Operations Consultant you will help Australian clients strengthen their security operations by designing, implementing, and improving their SOC capabilities. You will be responsible for leveraging industry-leading **SIEM solutions** such as **Splunk** , **Sentinel** , **Cortex** , or other security monitoring tools. Your key focus will be on enabling **advanced threat detection** , improving incident response workflows, and ensuring that SOC teams are properly trained and supported.
You will be responsible for guiding clients on meeting compliance and regulatory requirements on security detection and response capabilities. This role requires deep expertise in Australian industry-specific requirements for **government agencies, financial institutions** , and critical infrastructure sectors.
Collaboration will be your forte, as you work closely with clients to understand their unique security requirements and assess their current security posture. Armed with this knowledge, you'll provide expert guidance and recommendations on the best security practices, risk management strategies, and robust security policies that will fortify their defenses.
You won't stop at providing advice; you'll roll up your sleeves and get hands-on. Designing and implementing security controls, policies, and procedures will be your playground. You'll work alongside cross-functional teams to deploy state-of-the-art technologies, including firewalls, intrusion detection/prevention systems, access controls, and encryption technologies, ensuring a comprehensive security framework.
The thrill of uncovering vulnerabilities and risks is what motivates you. Armed with your extensive knowledge, you'll conduct thorough security assessments, leaving no stone unturned in identifying potential security breaches. Your findings will serve as the foundation for meticulous security audits and reviews, ensuring adherence to policies and procedures. Your reports and findings will be the catalyst for management decisions and actions.
In the fast-paced world of cybersecurity, staying ahead of the game is crucial. That's why you'll continuously immerse yourself in the latest security threats, technologies, and best practices. Your recommendations will drive enhancements to the organization's security posture, ensuring it remains at the cutting edge of defense.
Your influence won't be limited to systems alone. You'll lend your expertise to the design and review of IT infrastructure, systems, and applications, ensuring they are secure by design from inception.
Not only will you make an impact within our organization, but you'll also collaborate with customers and vendors on security assessments, audits, and due diligence activities. Your knowledge and experience will be instrumental in shaping secure collaborations and partnerships.
Our consultants are restless for innovation. They are at the edge of technology, changing the way our customers implement business solutions - so, if you're a problem-solver, an innovative thinker, and a self-starter with a passion high impact assignments which align technology to business outcomes, then we want to hear from you! Apply today to join our team that has a host of exciting projects and customers waiting for you to work with them to solve complex transformation puzzles through technology.
Your Future at Kyndryl
As a Security Consultant at Kyndryl you will join the Kyndryl Consultant Profession, working with other Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts - presenting unlimited opportunities with unmatched support through our investment in your learning, training, and career growth
**Who You Are**
You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.
**Required Skills:**
· Expertise in **SIEM** tools such as **Splunk** , **Sentinel** , **Cortex** , or other security monitoring tools.
· Strong knowledge of **Australian cybersecurity regulations** such as **Essential Eight** , **ASD's Strategies to Mitigate Cyber Security Incidents** , and **ACSC Cyber Threat Reports** .
· Experience in designing and implementing **SOC** processes, including incident detection, response, and recovery.
· Familiarity with **Australian Data Breach Notification (NDB)** scheme and **incident response protocols** .
· Strong understanding of **advanced threat detection** techniques such as **behavioral analytics** , **AI/ML-driven threat hunting** , and **threat intelligence feeds** .
· Experience in leading and mentoring SOC teams, ensuring continuous improvement in detection and response capabilities.
**Required Experience:**
· 8-10 years of experience in security operations, with a focus on **SOC** management and **incident response** .
· Proven experience working in **Australian market** with specific knowledge of **ACSC** guidelines and **Australian regulatory requirements** .
· Experience working in highly regulated industries (e.g., **banking, critical infrastructure, government** ).
· Certifications such as **CISSP** , **SANS GIAC** , and **SOC certifications** (e.g., CSIRT, GSEC) are highly desirable.
+ Australian Citizen with the ability to obtain AGSVA security clearance.
**Being You**
Diversity is a whole lot more than what we look like or where we come from, it's how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we're not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That's the Kyndryl Way.
**What You Can Expect**
With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter - wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.
**Get Referred!**
If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.
Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

**Who We Are**
At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.
**The Role**
As a Senior Security Operations Consultant you will help Australian clients strengthen their security operations by designing, implementing, and improving their SOC capabilities. You will be responsible for leveraging industry-leading **SIEM solutions** such as **Splunk** , **Sentinel** , **Cortex** , or other security monitoring tools. Your key focus will be on enabling **advanced threat detection** , improving incident response workflows, and ensuring that SOC teams are properly trained and supported.
You will be responsible for guiding clients on meeting compliance and regulatory requirements on security detection and response capabilities. This role requires deep expertise in Australian industry-specific requirements for **government agencies, financial institutions** , and critical infrastructure sectors.
Collaboration will be your forte, as you work closely with clients to understand their unique security requirements and assess their current security posture. Armed with this knowledge, you'll provide expert guidance and recommendations on the best security practices, risk management strategies, and robust security policies that will fortify their defenses.
You won't stop at providing advice; you'll roll up your sleeves and get hands-on. Designing and implementing security controls, policies, and procedures will be your playground. You'll work alongside cross-functional teams to deploy state-of-the-art technologies, including firewalls, intrusion detection/prevention systems, access controls, and encryption technologies, ensuring a comprehensive security framework.
The thrill of uncovering vulnerabilities and risks is what motivates you. Armed with your extensive knowledge, you'll conduct thorough security assessments, leaving no stone unturned in identifying potential security breaches. Your findings will serve as the foundation for meticulous security audits and reviews, ensuring adherence to policies and procedures. Your reports and findings will be the catalyst for management decisions and actions.
In the fast-paced world of cybersecurity, staying ahead of the game is crucial. That's why you'll continuously immerse yourself in the latest security threats, technologies, and best practices. Your recommendations will drive enhancements to the organization's security posture, ensuring it remains at the cutting edge of defense.
Your influence won't be limited to systems alone. You'll lend your expertise to the design and review of IT infrastructure, systems, and applications, ensuring they are secure by design from inception.
Not only will you make an impact within our organization, but you'll also collaborate with customers and vendors on security assessments, audits, and due diligence activities. Your knowledge and experience will be instrumental in shaping secure collaborations and partnerships.
Our consultants are restless for innovation. They are at the edge of technology, changing the way our customers implement business solutions - so, if you're a problem-solver, an innovative thinker, and a self-starter with a passion high impact assignments which align technology to business outcomes, then we want to hear from you! Apply today to join our team that has a host of exciting projects and customers waiting for you to work with them to solve complex transformation puzzles through technology.
Your Future at Kyndryl
As a Security Consultant at Kyndryl you will join the Kyndryl Consultant Profession, working with other Kyndryl Consultants, Architects, Project Managers, and cross-functional Technical Subject Matter Experts - presenting unlimited opportunities with unmatched support through our investment in your learning, training, and career growth
**Who You Are**
You're good at what you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.
**Required Skills:**
· Expertise in **SIEM** tools such as **Splunk** , **Sentinel** , **Cortex** , or other security monitoring tools.
· Strong knowledge of **Australian cybersecurity regulations** such as **Essential Eight** , **ASD's Strategies to Mitigate Cyber Security Incidents** , and **ACSC Cyber Threat Reports** .
· Experience in designing and implementing **SOC** processes, including incident detection, response, and recovery.
· Familiarity with **Australian Data Breach Notification (NDB)** scheme and **incident response protocols** .
· Strong understanding of **advanced threat detection** techniques such as **behavioral analytics** , **AI/ML-driven threat hunting** , and **threat intelligence feeds** .
· Experience in leading and mentoring SOC teams, ensuring continuous improvement in detection and response capabilities.
**Required Experience:**
· 8-10 years of experience in security operations, with a focus on **SOC** management and **incident response** .
· Proven experience working in **Australian market** with specific knowledge of **ACSC** guidelines and **Australian regulatory requirements** .
· Experience working in highly regulated industries (e.g., **banking, critical infrastructure, government** ).
· Certifications such as **CISSP** , **SANS GIAC** , and **SOC certifications** (e.g., CSIRT, GSEC) are highly desirable.
+ Australian Citizen with the ability to obtain AGSVA security clearance.
**Being You**
Diversity is a whole lot more than what we look like or where we come from, it's how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we're not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That's the Kyndryl Way.
**What You Can Expect**
With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter - wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.
**Get Referred!**
If you know someone that works at Kyndryl, when asked 'How Did You Hear About Us' during the application process, select 'Employee Referral' and enter your contact's Kyndryl email address.
Kyndryl is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. Kyndryl is also committed to compliance with all fair employment practices regarding citizenship and immigration status.

WHO ARE WE?

Tecala is an award-winning national ICT managed services provider. We work hard to help our customers transform their businesses through the innovative use of technology and need more great people to join our vibrant and growing team.

We have been certified as a Great Place to Work for 2023, 2024 and 2025, ranked in the top 10 of Australia's Best Workplaces in Technology 2025, ranked #19 in Australia's Best Workplaces List for 2025, and been recognised as Australia's #1 Managed Service Provider and ranked #29 globally in the 2025 MSP 501, Channel Futures' industry-leading benchmark for high-performing MSPs worldwide.

We pride ourselves on our reputation for quality and consistently delivering the right solution for our customers. You have the opportunity to become part of a supportive team, working together to provide solutions that make a difference to our broad customer base. If you are passionate about technology and motivated by assisting customers in improving their ICT operations, you will thrive with us.

ABOUT THE ROLE

The Cyber Security Principal Consultant will lead strategic engagements within our Cyber Security Managed Services practice. In this senior role, you'll act as a trusted advisor to clients, designing tailored security solutions, guiding risk and compliance initiatives, and overseeing technical delivery across security operations. This role is critical in driving customer acquisition, enhancing revenue growth, and contributing to Tecala's Cyber Security service innovation while staying ahead of emerging threats and technologies.

The ideal candidate will combine deep technical cybersecurity expertise, sales enablement experience, and a strong commercial mindset to effectively position Tecala in the market.

We are open to candidates based in most states across Australia.

Key responsibilities will include (but not limited to):

• Act as a trusted advisor to clients on cybersecurity strategy, risk management, and compliance.

• Lead security assessments, maturity reviews, and roadmap development.

• Translate complex security concepts into business-relevant language for stakeholders.

• Design end-to-end cybersecurity solutions tailored to client environments, whilst ensuring solutions align with industry standards.

• Provide technical oversight across security operations, incident response, and threat management.

• Assist sales teams with scoping, solutioning, and presenting cybersecurity offerings.

• Develop proposals, RFP responses, and client presentations.

• Identify opportunities to expand cybersecurity services within existing accounts. Drive net new opportunities through business development activities and personal networks.

• Work closely with Sales, Presales, Marketing, Product, and Technical teams to position Tecala's cybersecurity capabilities. Define GTM strategy and value proposition for cybersecurity service offerings.

• Stay current with emerging threats, technologies, and regulatory changes.

• Contribute to service development and improvement initiatives.

• Represent Tecala at industry events, webinars, and thought leadership forums.
  

Required skills and experience:

• Proven experience in Cybersecurity consulting/advisory, Cybersecurity Managed Services Sales/Presales or Cybersecurity solutioning and architect roles within IT services.

• Deep technical understanding of Cybersecurity ecosystems, cyber risk, compliance standards, and modern threat vectors.

• Ability to develop and refine GTM strategies and productisation for Cybersecurity services.

• Ability to bridge technical and commercial conversations with clients.

• Skilled at scoping projects and customer analysis to support business development efforts. And the ability to provide quotations and proposals to customers in a timely manner.

• Ability to develop new clients, source new opportunities, and close deals effectively. Skilled at owning and coordinating the end-to-end sales process for cybersecurity solutions.

• Ability to lead customer engagement initiatives, fostering relationships through events, solution presentations, campaigns and strategic reviews.

• Ability to maintain broad-spectrum technology knowledge across security products and services.

• Strong communication and collaboration skills, ensuring effective engagement with stakeholders.

• Strategic thinker with a hands-on approach to execution, driving measurable success.

• Ability to minimize company exposure and risk on projects, ensuring smooth execution.

• Ensure quality assurance procedures and engagement reviews align with business goals.

WHAT WE CAN OFFER YOU

As part of our team, you'll be able to learn and grow in a supportive and inclusive environment. We have listed some of those benefits below for you:

• Paid Birthday Leave.

• Inclusive paid parental leave policy that supports all parents & carers.

• Health & Wellness perks including discounted gym membership.

• Access to ongoing Learning & Development opportunities including self paced learning through our learning management system.

• Paid certifications and remuneration incentive to get upskilled / certified to support your development

• Access to Career Pathways so you can continue to build a career in the business.

• Reward & Recognition Program where you can also thank and reward your team mates

• Hybrid and flexible working model

• Employee discounts – Access discounted rates and offers from a variety of providers, including health insurance and IT Hardware.

• Employee Assistance Program (EAP)

Note : As an essential part of our hiring process, you will be required to undertake a National Criminal History Check.

HOW TO APPLY

If you're excited about the opportunity to make a difference in our business, meet the musts and tick some maybes, then apply now.

Be sure to include a cover letter and CV to support your application.

No agencies please – we've got this one covered.

We foster an inclusive and diverse work environment where our people can be themselves. Every idea and perspective is valued so that our services reflect the companies we support. We welcome diversity in all its forms, and so we welcome applications from suitably qualified candidates across the range of underrepresented communities.

**Introduction**
A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe. You'll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio; including Software and Red Hat. Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role, you'll be encouraged to challenge the norm, investigate ideas outside of your role, and come up with creative solutions resulting in ground breaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.
**Your role and responsibilities**
As a Security Consultant, you will be a key advisor for IBM's clients, analysing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client's organisation with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.
Responsibilities & Duties:
*
Engage with clients to understand their business needs and objectives related to identity, access, and privileged access management.
*
Assess clients' existing systems, processes, and infrastructure to identify gaps and opportunities for Digital Identity and PAM integration.
*
Design and architect Privileged Access Management (PAM) solutions tailored to meet clients' requirements.
*
Collaborate with technical teams to ensure successful implementation, configuration, and customization of PAM products.
*
Conduct workshops and training sessions for client stakeholders to educate them on PAM functionalities, governance, and best practices.
*
Provide guidance and support to clients throughout the project lifecycle, including troubleshooting, issue resolution, and ongoing operational support.
*
Document project requirements, technical specifications, configurations, and deliverables.
*
Coordinate, collate, and validate artefacts related to audit queries; provide remediation plans for identified gaps.
*
Support the operations team in managing the PAM environment, including but not limited to:
*
Incident Management
*
Problem Management
*
Minor security patches
*
Defect fixes for recurring incidents
*
Vendor coordination for PAM tools
*
Application onboarding for privileged access
*
Operations Management and reporting
*
Coach and mentor junior security consultants, developing team skills in selected vendor PAM products (e.g., CyberArk, BeyondTrust, Delinea, etc.).
*
Thrive in a fast-paced environment, take initiative, and collaborate effectively across teams.
**Required technical and professional expertise**
Required Professional and Technical Expertise:
*
Degree in Information Technology, Computer Science, Network/Telecommunications Engineering, or equivalent (B.Tech, B.E, MCA, M.Sc. IT)
*
12+ years of experience in PAM architecture design, consulting, identity governance, and privileged access management.
*
Specialized expertise in IAM and PAM technologies, including IBM PAM products, SailPoint, Saviynt, Okta, Entra ID, CyberArk, and BeyondTrust.
*
Proven experience as an PAM security professional in client-facing roles, preferably with a focus on privileged access management.
*
In-depth knowledge of related technologies such as Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity federation.
*
Strong understanding of PAM frameworks, protocols, and standards (e.g., OAuth, OpenID Connect, SAML).
*
Demonstrated proficiency in designing and implementing PAM solutions in complex enterprise environments.
*
Hands-on experience managing operations and supporting large-scale PAM implementations.
*
Strong problem-solving and analytical skills, with the ability to diagnose and resolve complex technical issues.
*
Excellent communication and stakeholder management skills.
.
IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.