You’re only human. 

It’s a strange thing to say, because us humans are capable of incredible things. And at Medibank, we know our greatest potential lies in the people who work with us. 

We strive to make real, fundamental change, driven by a simple purpose: to create the best health and wellbeing for all of Australia.

About the Role

We are looking for a skilled Security Engineer to design, build, and operate enterprise-grade security platforms.

This is a hands-on engineering role where you will play a critical part in strengthening organisational security posture through the implementation of robust controls, platforms, and frameworks aligned to regulatory and compliance obligations. You will work across complex environments to protect sensitive data, critical systems, and customer assets against evolving cyber threats.

This role is ideal for someone who thrives in mature governance ecosystems, where risk, compliance, and security engineering intersect to deliver secure-by-design outcomes.

Key Responsibilities:

Design, implement, and operate security platforms spanning:

Endpoint Detection & Response (EDR)
Data Loss Prevention (DLP)
Email and Web Security
Vulnerability Management
Cloud Security (CSPM/CWPP)

Ensure solutions align with enterprise security standards, regulatory frameworks, and internal governance controls
Contribute to the development of security guardrails, policies, and technical standards
Embed risk-based security controls across systems and applications

Risk, Compliance & Assurance

Translate technical vulnerabilities into business risk to support governance decision-making
Ensure alignment with recognised frameworks such as NIST, CIS Controls, Zero Trust, and MITRE ATT&CK
Support audit, regulatory, and assurance activities through strong documentation and evidence-based practices
Drive risk-based vulnerability management, including prioritisation, remediation tracking, and SLA adherence

Engineering & Innovation

Build and deploy modern, automated security solutions to detect and respond to threats
Develop security tooling, automation, and integrations to improve operational efficiency
Conduct proof-of-concepts and technology evaluations aligned to enterprise and regulatory requirements
Stay ahead of emerging threats, vulnerabilities, and attack methodologies

Stakeholder Engagement

Partner with Security Operations, Risk & Assurance, Data Governance, and Architecture teams
Provide expert guidance on security design in complex, regulated environments
Collaborate with vendors, MSSPs, and strategic partners

What We’re Looking For:

5+ years in Security Engineering or Cyber Security roles
Proven experience working within highly regulated industries (e.g. healthcare, finance, insurance, government)
Strong understanding of security governance, risk management, and compliance frameworks

Deep experience across multiple domains:

Endpoint Security (EDR, application control)
SIEM platforms (Splunk, Sentinel, Elastic)
Vulnerability management tools (Nessus, Qualys, Rapid7)
Network security (Firewalls, IDS/IPS)
Data protection and email/web security tools

Experience implementing policy-driven and risk-based security controls
Knowledge of cloud security and modern enterprise architectures

Strong understanding of:

Risk assessments and threat modelling
Control design and assurance
Regulatory obligations and audit readiness

Ability to operate effectively in environments with strict governance, compliance, and reporting requirements

Attributes:

Strong analytical and problem-solving skills
Ability to communicate complex technical concepts to business stakeholders
Detail-oriented with a focus on documentation and auditability
Collaborative mindset with ability to influence across teams
Passion for continuous learning and staying ahead of cyber threats

Imagine working with us

We understand that work means different things to everyone...  We know happy, healthy people make great teams, and great teams put more heart into each customer and patient interaction. And that’s why we’re reinventing work.  

Imagine a workplace that helps you and your family thrive. Where connection, personal development and health and wellbeing are front of mind. To learn more about our benefits go to https://careers.medibank.com.au/culture/rewards-benefits/

For you, work should help you Live Better. It should bring you fulfillment and joy. And with Medibank, it could.

Inclusion and Accessibility

We believe in everyone's potential and strive to make Medibank inclusive for all because different perspectives make us better. We encourage applications from everyone, including Aboriginal and Torres Strait Islander peoples, neurodivergent candidates, LGBTQIA+ community including transgender and gender diverse candidates and candidates with a disability.

If you need adjustments or alternative formats at any stage of the recruitment or employment journey, we’re here to help. You can let us know directly in the application form, or if you’d prefer to discuss before applying, please reach out to us *******@medibank.com.au or (03) 8622 5***. Learn more about our commitments and employee stories at https://careers.medibank.com.au/diversity-inclusion/(please copy and paste the URL onto your browser)

Medibank proudly recognised as Best Enterprise Organisation, 2026 AFR BOSS Best Places to Work