Lead Cyber Security Engineer

Responsibilities

The role involves delivering hands-on cloud security engineering, advisory services, and pre-sales support to clients. You will design and implement security controls across cloud environments while acting as a bridge between technical teams and strategic client objectives.

Requirements

Candidates must have a strong foundation in DevOps, cloud engineering, and extensive experience with CNAPP platforms like Palo Alto Cortex or Wiz. Proven ability to develop security solution designs and integrate security tools into software delivery pipelines is essential.

Skills

• Cloud security
• DevSecOps
• CNAPP
• Palo Alto Networks Cortex
• Wiz
• Terraform
• Python
• Bash
• Security architecture
• CI/CD pipelines
• AWS
• Azure
• Zero trust
• Stakeholder management
• Risk management
• Compliance

Benefits

• Professional development
• Flexible annual leave
• Flexible work arrangements
• Parental leave
• Family wellbeing support
• AI-enabled tools and platform access
• Flexible personal leave

About this role

About us
Mantel is an Australian-owned technology consulting business with capabilities across Cloud, Digital, Data, Delivery & Security. Since our inception in November 2017, we have experienced remarkable growth across Australia & New Zealand and are honoured to be recognised as a Great Place to Work for 7 years in a row!
We hire smart and talented people and get out of their way. As a principle-based organisation we have a flat structure with no hierarchy. By focusing on our five principles and not getting caught up in red tape, we trust you to get the job done!
Working in our growing cyber security capability allows you to work closely with clients across our teams. Our security capabilities span governance, risk and compliance, cyber engineering, and offensive security. We enable large-scale cyber security initiatives for our clients, and improve the protection of IT environments.
About the role
This position will have a wide remit, covering hands-on engineering delivery, resident engineer and advisory work with clients and partners, stakeholder management, and pre-sales support. The role will both deliver direct consulting services to clients in the area of cloud, DevSecOps and AI security design and implementation, as well as act as a bridge between the security engineering team and broader Mantel capabilities to help ensure that the technical solutions we recommend and deliver to clients will achieve the strategic objectives intended.
You’ll bring a strong background in cloud and DevOps engineering, including cloud networking, along with experience in security architecture, solution design and a broad range of security controls and solutions. The role requires a proven ability to develop security solution designs, as well as to integrate and configure security tools into new or existing software delivery pipelines. We value people who understand the security rationale behind a control, not just the product settings.
Whilst this role will have a focus around CNAPP platforms (Palo Alto Networks Cortex Cloud and Wiz), we are not expecting this to be the entirety of the role, with application across DevSecOps, SASE, cloud network security, AI security and general cloud security expected.
Your day-to-day
Understanding client business requirements, current strategies, technologies, limitations and translating them into robust, justifiable security solution definitions.
Delivering large scale cloud security projects to drive Continuous Threat Exposure Management (CTEM) outcomes for enterprise customers, in particular using CNAPP and exposure management platforms such as Palo Alto Networks Cortex Cloud and Wiz
Designing and deploying security controls, including policy as code (e.g. OPA/Rego, Checkov), across the following use cases:
Application security - securing developer pipelines and workflows, including SAST, SCA, secrets and IaC scanning in CI/CD, with findings routed to Jira or ServiceNow
Cloud Platform Security - CSPM, CIEM and DSPM using platforms such as Cortex Cloud and Wiz
Run time security - Both agent and agentless based approach deploying EDR and CWPP and providing unified SecOps outcomes for predominantly cloud native environments
Engineering and migration work on CNAPP rollouts, including onboarding cloud accounts, code repositories and workloads, and moving clients off legacy tooling
Integrating CNAPP platforms with each client’s wider stack, such as CrowdStrike, Qualys, ServiceNow, SIEM and CI/CD tooling, so findings reach the people who fix them
Working as a resident engineer with clients and partners: advising on platform use, running enablement sessions and handing over to operations teams
Developing designs encompassing security infrastructure, platforms and services. This may include network security group policies, IAM controls, data loss prevention protection policies and more.
Reviewing, designing and implementing secure solutions across major cloud providers (AWS, Azure, Google)
Support key security partnerships with partners like Palo Alto and Wiz , keeping informed of product developments and releases and maintaining relationships with key Palo and Wiz system and product SE’s
Supporting sales and pre-sales activities with clients, including solution design, effort estimates and SOW input
What you’ll need to be successful:
A strong DevOps and cloud engineering foundation: building CI/CD pipelines (e.g. GitHub Actions, GitLab CI or Azure DevOps), writing Terraform or other IaC, scripting in Python or Bash, and designing cloud networking in AWS and/or Azure
Extensive knowledge and hands-on experience with CNAPP platforms (Palo Alto Networks Cortex Cloud preferred; Wiz or comparable platforms also considered), specifically experience with one of below solutions
Cortex (CNAPP)
Prisma access (SASE)
Software firewalls
Experience in designing, implementing and maintaining security solutions and control implementations; primarily in cloud and / or hybrid environments
Solid grounding in security fundamentals (CIA triad, least privilege, defence in depth, encryption, logging and monitoring) and cloud security basics across AWS and Azure
Strong knowledge of zero trust principles and architectures, as well as their practical limitations and inhibitors to successful implementations
Comfortable using AI coding assistants and agents to speed up your own engineering work, with a sensible view of where they need guardrails
Willingness to continually upskill and flex across platforms and clients as demand shifts; including learning new technologies and obtaining new certifications
Experience in mentoring and leading junior consultants
Experience in providing technical security leadership within project teams and projects
Comfortable working embedded in client and partner teams as a resident engineer: managing your own workload, raising risks early and leaving clear documentation and handover behind
Experience working in regulated environments
Excellent written and verbal comm...

About Mantel

IT Services and IT Consulting · 501-1,000 employees · headquartered in Melbourne, Victoria