Security Engineer
- Monitor and assess security threats and vulnerabilities across various platforms.
- Investigate cyber security incidents and conduct threat hunting and root cause analysis.
- Implement and optimise security tools and controls across multiple environments.
We Dream. We Design. We Deliver.
Join hummgroup, one of Australasia’s most successful and enduring non-bank financial services institutions. We specialise in fast, easy finance with a market-leading range of business asset finance, credit cards and point of sale payment plan solutions designed around the core needs of today’s businesses and retail consumers. Come join our team and be a part of our next chapter of innovation and growth.
About the role
The Security Engineer plays a critical role within the organisation’s Cyber Security and Humm 3.0 Transformation program, protecting information and technology assets in an increasingly complex threat landscape. This role offers the opportunity to work hands-on with modern security technologies, tools, and frameworks, contributing directly to the organisation’s cyber resilience and risk posture. You will collaborate with cross-functional teams, analyse threats, respond to incidents, and support continuous improvement of security controls.
Ideal for technically capable cyber security professionals, this role suits someone who thrives in fast-paced environments, enjoys solving complex security challenges, and wants their work to have real, visible impact.
Key Responsibilities
Key responsibilities include:
- Monitor and assess security threats, vulnerabilities and events across SIEM, endpoint, network, email, web, DLP and cloud security platforms.
- Investigate cyber security incidents, conduct threat hunting and root cause analysis, and turn lessons learned into stronger detection and response.
- Implement, configure and optimise security tools and controls across identity, endpoint, network, application and cloud environments.
- Manage vulnerability scanning, system hardening, attack surface reduction and remediation validation.
- Support cyber risk assessments, audits and compliance activities across on-premises, cloud, SaaS and third-party environments.
- Coordinate security testing, DevSecOps, penetration testing and assurance activities with internal teams and external partners.
- Produce security dashboards and reports, build trusted stakeholder relationships, promote security awareness and participate in the on-call rotation as required.
Qualifications & Experience
- 3+ years of experience in a cyber security role such as Security Analyst, Security Engineer, or similar.
- Relevant certifications and/or tertiary education, such as:
- Security Operations, CompTIA CySA+, AWS / Microsoft security certifications or similar
- Vendor‑specific certifications for SIEM, EDR, firewalls, cloud security, or DLP.
- Experience with SIEM platforms, automation, threat hunting, and intelligence.
- Firewalls, proxies, secure web gateways, endpoint detection and response, application whitelisting, routers, switches, micro‑segmentation, NDR, DLP, SSE and web application firewalls.
- Microsoft 365, AWS, Azure, Windows Server, Linux/Unix, iOS and Android.
- Web application security, vulnerability scanning, DevSecOps pipelines, penetration testing support.
- Experience with risk assessments, SOPs, playbooks, guidelines, compliance frameworks (PCI DSS, ASD Essential 8, ISO 27001, NIST).
- Ability to produce clear operational‑level reporting.
About you
- Strong analytical and problem‑solving mindset.
- Ability to work independently in fast‑paced environments.
- Effective communicator who can simplify technical concepts for non‑technical stakeholders.
- Collaborative team player committed to improving organisational security maturity.
- High levels of integrity, accountability, and attention to detail.
Working at hummgroup
We embrace flexible working arrangements, ensuring a genuine work-life balance and a fun, vibrant inclusive culture that embraces diverse perspectives and values the unique contributions of each of our team through our behaviours Curious - Adaptable - Tenacious – Accountable - Respectful.
We invite candidates of all gender expressions, ethnicities, ages, and other culturally diverse groups to apply. We are committed to making reasonable adjustments to provide a positive, barrier-free recruitment process and welcoming and supportive environment where all our people can thrive.
If this sounds like the opportunity, you have been looking for then apply today!
We vet all employer accounts and do our best to keep job ads safe, but scams can still occur. Be cautious when sharing personal information — never provide financial details or make payments during the application process. For extra security, use the Apply button on our site when proceeding.