Information Security/Cybersecurity Operations Specialist

Join HESTA’s growing Information Security/Cybersecurity team and play a hands-on role in strengthening our cyber resilience. Reporting to the Manager, Information Security Operations, you’ll lead day-to-day security monitoring, threat detection, investigation and response, with a particular focus on Data Loss Prevention (DLP), insider risk and emerging AI threats. You’ll work across HESTA, with our MSSP/MDR and security partners to identify and respond to evolving threats - including data leakage to generative AI, prompt injection, shadow AI, agentic AI and adversarial use of AI.

What You’ll Do

• Monitor, triage and investigate security alerts and incidents, supporting containment, eradication and recovery.
• Operate and continuously improve DLP and insider risk controls, including investigation, tuning and exception management.
• Detect and respond to AI-related security threats, including shadow AI and data leakage.
• Conduct threat hunting and intelligence activities aligned to MITRE ATT&CK and emerging threats.
• Support digital forensics and incident response activities.
• Develop and tune SIEM/SOAR detection content and optimise SOC security platforms.
• Partner with internal teams, MSSP/MDR providers and external security partners to strengthen cyber resilience.
• Support HESTA’s information security obligations, including APRA CPS 234 and CPS 230.

What You’ll Bring

You’ll be an experienced Cybersecurity/Security Operations professional with:

• Hands-on experience across DLP, security monitoring, incident response and threat detection.
• Strong understanding of SIEM/SOAR, threat hunting and detection engineering.
• Experience securing or monitoring generative and agentic AI, including data leakage, prompt injection and non-human identities - highly regarded.
• Experience working with MSSP/MDR or outsourced security partners.
• Knowledge of cloud, identity and access security and contemporary cyber security frameworks.
• Understanding of the Australian regulatory environment, particularly CPS 234, CPS 230 and privacy requirements.
• Relevant cybersecurity, IT or Computer Science qualifications and industry certifications are highly regarded.

This is an opportunity to work at the intersection of cybersecurity, data protection and emerging AI risk in a purpose-led organisation. If you’re curious, hands-on and passionate about staying ahead of an evolving threat landscape, we’d love to hear from you – Apply Now