Security Operations Engineer

About this role

Company Description ColCap Financial Group is a leading Australian-headquartered non-bank lender with over $21.8 billion in assets under management across Australia and the UK. The company focuses on delivering financial opportunities for customers, distribution partners, and investors through deep expertise in residential property lending and innovative funding solutions. ColCap maintains diverse warehouse funding lines with domestic and international banks and is an experienced issuer of Residential Mortgage Backed Securities. In Australia, it operates under brands such as Origin MMS, Homestar Finance, Granite Home Loans, and Austrata Finance, and under the Molo Finance brand in the UK. ColCap is licensed as Columbus Capital Pty Limited with AFSL and Australian Credit Licence 337303.

PURPOSE OF THE POSITION

The primary focus of the Security Operations Engineer is to own the day-to-day operation of ColCap’s cybersecurity environment, ensuring security tooling is correctly configured, monitored, and continuously refined, while supporting the Head of Technology in the delivery of cybersecurity uplift initiatives that strengthen the organisation’s security posture across all jurisdictions.

KEY ACCOUNTABILITIES

§ Operate, tune, and maintain ColCap’s core security tooling (including endpoint detection and response, network and email threat detection, identity protection, and application control) to ensure effective and reliable coverage.

§ Monitor security alerts and telemetry across the environment, triaging, investigating, and responding to events in line with agreed processes and escalation paths.

§ Lead and coordinate the response to security incidents, containing threats, performing analysis, and documenting findings and remediation actions.

§ Support ColCap Leadership in the planning and execution of cybersecurity uplift initiatives, translating strategy into practical, well-governed implementation.

§ Continuously review and refine detection rules, policies, and configurations to reduce false positives, close coverage gaps, and improve operational efficiency.

§ Conduct routine vulnerability identification and assist in coordinating remediation activities with relevant internal and external stakeholders.

§ Maintain security operations documentation, runbooks, and standard operating procedures to ensure consistency and operational resilience.

§ Produce regular reporting on security posture, threat activity, and the status of uplift initiatives for both technical and executive audiences.

§ Support compliance and assurance activities, including evidence collection aligned to ColCap’s information security management system and relevant regulatory obligations.

§ Maintain awareness of emerging threats, vulnerabilities, and security technologies, assessing their relevance and potential application to ColCap’s environment.

KEY RELATIONSHIPS

Internal

· Head of Technology

· Head of Cyber Security

· Technology team

· All areas of ColCap & its subsidiaries

External

· Sophos (MDR)

· Darktrace

· ThreatLocker

· Microsoft

· Third Party ITSM (NTT Data)

· MyCISO

· Any other parties who interface with our security tooling & services

PERSONAL and TECHNICAL ATTRIBUTES

· Demonstrated ability to undertake the above responsibilities

· Strong understanding of cybersecurity principles, threat landscapes, and the cyber kill chain

· Hands-on experience operating security tooling such as EDR/MDR, SIEM, email and network detection, and identity protection platforms

· Practical experience in security alert triage, incident investigation, and response

· Understanding of cloud security concepts, particularly within Microsoft Azure and Entra ID

· Familiarity with Secure by Design and Zero Trust principles

· Keen interest in new and developing security technologies

· Willingness to collaborate closely with various business units

· Excellent written and verbal communication skills

· Able to work under pressure and meet deadlines

· Strong organisational skills

· Able to manage sensitive and confidential information

· Able to manage and prioritise tasks and time efficiently

· Able to demonstrate initiative and a proactive approach to daily tasks

HIGHLY DESIRABLE SKILLS & PROFICIENCIES

· ISO27001 and/or NIST experience

· Microsoft Defender suite (Endpoint, Identity, Office 365, Cloud)

· Microsoft Sentinel or equivalent SIEM / SOAR platforms

· Darktrace (Network, Email, Identity)

· Sophos MDR / endpoint protection

· ThreatLocker or equivalent application control / allow-listing

· Microsoft Entra ID, Conditional Access, and MFA administration

· KQL, PowerShell, and scripting for automation and investigation

· Vulnerability management tooling

· Understanding of frameworks such as the ACSC Essential Eight, ISO/IEC 27001, and MITRE ATT&CK

· Exposure to security operations within financial services or other regulated industries

QUALIFICATIONS

· Degree in Computer Science, Information Technology, Cybersecurity, or a related discipline

· A minimum of 4 years’ experience in a cybersecurity or security operations role

· Relevant industry certifications (e.g. CompTIA Security+, Microsoft SC-200, GIAC, or equivalent) are highly regarded

About security roles for ex-police

Security management, operations and consultancy roles. Years of operational policing — command, incident response, public order — translate directly into corporate security, and employers in this sector actively rate police experience.