WorkCover Queensland is entering an exciting new chapter, guided by a renewed strategic focus and strong executive leadership shaping our 2030 Strategy. We’re embarking on an enterprise-wide transformation to strengthen our impact and continue making a positive difference in people’s lives.

The Cyber Security Engineer role is an exciting opportunity to help shape the future of WorkCover’s security operations. Reporting to the Cyber Security Manager – Detect & Respond, you will play a vital role in strengthening our security posture through automation, optimization, and continuous improvement. If you’re passionate about leveraging cutting-edge technology to enhance cyber security and enjoy working in a dynamic, high-impact environment, this role is for you.

What You’ll Do

• Design, implement, and maintain automated detection and response playbooks/processes using Microsoft Sentinel and other security technologies.
• Translate manual Standard Operating Procedures (SOPs) into scalable, automated workflows.
• Tune Sentinel alert rules to reduce false positives and improve detection fidelity.
• Work closely with SOC/SIEM partners to refine threat detection capabilities and align them with business priorities.
• Monitor and triage security alerts via Microsoft Defender and Sentinel.
• Create and manage incidents and service requests through ServiceNow, leveraging Defender API integrations.
• Maintain queue hygiene, validating ticket assignment, resolution accuracy, and closure protocols.
• Conduct initial triage checks, including sign-in anomalies, device health, and user/context lookups.
• Support incident response activities including containment, resolution, and post-incident reviews.
• Participate in tabletop exercises and contribute to lessons learned documentation.
• Mentor and coach team members in automation and orchestration techniques.
  
  

What We’re Looking For

You are a proactive and innovative cyber security professional with a strong passion for automation and continuous improvement. You thrive in environments where you can make a tangible impact, enhancing security operations by optimizing tools and automating processes. Your curiosity drives you to seek out new technologies and ideas that improve security, and you’re comfortable handling complex challenges with resilience and adaptability. Most importantly, you enjoy collaborating with others and mentoring your team to achieve high performance.

What You’ll Bring

• 1+ year’s experience in cyber security operations; 3+ years of total experience in Technology operations
• Strong hands-on experience with Microsoft Sentinel, Defender, and ServiceNow.
• Proficiency in automation technologies such as Python, Kusto Query Language (KQL), Azure Logic Apps, Power Automate, and Power Applications.
• Microsoft SC-200 and Microsoft AZ-500 certification desirable.
• Experience with MITRE ATT&CK Framework, NIST Cyber Security Framework, and ACSC Essential 8 & ASD Cloud Blueprints.
• Experience with Splunk, Curator and  CrowdStrike is a plus.
• Proven ability to manage competing priorities in a complex, regulated environment.
• Strong communication skills, including experience engaging with senior management.
  
  

A Bit About Us

Our vision is to be the best workers’ compensation insurer, making a positive difference to people’s lives and keeping Queenslanders working. We turn care into action, act with integrity, and work together to unlock what’s possible. If you value empathy, collaboration, and continuous improvement, you’ll find a great community at WorkCover. 

Working in a collaborative team environment within a supportive and engaged organisation, you’ll enjoy a hybrid work model, access to personalised learning and development opportunities and the holistic support of our health and wellbeing program. We offer industry competitive salaries, a generous superannuation scheme (including co-contribution) and study assistance. You can find out more about our Employee Benefits by visiting Working at WorkCover Qld. 

How do I apply?

If this sounds like you, we’d love to hear from you. Applications close 4^th March 2026. 

We are committed to ensuring WorkCover reflects the diversity of the Queensland community. We welcome applications from First Nations peoples, members of the LGBTQIA+SB community, people of all ages, people who are neurodivergent, people with disability, and people from culturally and linguistically diverse backgrounds.

To ensure you have the best and most inclusive experience, please let us know if you require any reasonable adjustments or accommodations to help you confidently showcase your skills and potential. You can contact us at recruitment@workcoverqld.com.au or let our recruitment team know during your conversation with them.

Pre-employment checks will be conducted on all prospective employees. This includes a Right to Work in Australia Check, Police Check, Education Check, Reference Check, and where appropriate a Visa Check. The information provided will be treated as confidential in accordance with the Information Privacy Act 2009 (Qld).