Security Platform Engineer with runZero

Greetings!! We have an urgent opening for “Security Platform Engineer with runZero”- Sydney, Australia. Please let me know your interest. Also you can refer me if anyone is interested contact at Aditi at 0391110296/ 0260750102 or : [email protected]

Role – Security Platform Engineer with runZero

Location – Sydney, Australia

Duration:- Contract

Job Description:

Platform engineering and configuration

• Design and implement the runZero platform operating model, including environments, access, roles, boundaries, sites, asset groups, tags and naming standards.

• Configure discovery coverage for corporate, data centre, cloud, remote access, network, IoT and relevant OT environments.

• Design appropriate active scanning, passive discovery and integration patterns for different network zones and operational risk profiles.

• Establish safe scanning standards, approval gates, maintenance windows and exception processes for sensitive or fragile environments.

• Configure asset classification, ownership, business context, criticality and lifecycle attributes.

• Define standards for handling transient, ephemeral, duplicate, decommissioned and unmanaged assets.

• Develop reusable configuration patterns and templates that can be applied consistently across sites and environments.

• Maintain a clear separation between production configuration, testing and experimental changes.

Integrations and data engineering

• Integrate runZero with CMDB, ServiceNow, Tenable, EDR, NAC, DNS/DHCP, cloud platforms, identity systems, SIEM, SOAR and relevant infrastructure tools.

• Implement API-based ingestion and egress patterns using secure service identities and least-privilege access.

• Automate asset reconciliation, deduplication, enrichment, ownership mapping and data-quality checks.

• Ensure downstream systems receive consistent, useful and appropriately scoped data rather than uncontrolled asset or alert noise.

• Define integration contracts, schemas, field mappings, ownership, error handling, retry behaviour and support expectations.

• Build mechanisms to detect integration drift, stale credentials, failed synchronisation and unexpected data-volume changes.

Automation and workflow engineering

• Automate platform onboarding, configuration validation, scan scheduling, asset tagging, reporting and operational housekeeping.

• Automate the routing of actionable exposures to the correct security, infrastructure, network, cloud or application owners.

• Implement event-driven workflows for newly discovered assets, exposed services, control gaps, unauthorised devices and material changes.

• Design idempotent automation that can be safely re-run without creating duplicate records, tickets or configuration drift.

• Use APIs, webhooks, scripts and workflow platforms to reduce manual administration and improve response times.

• Introduce approval controls for high-impact or potentially disruptive actions.

• Create automated lifecycle handling for assets that are retired, renamed, moved, rebuilt or short-lived.

SRE and operations

• Treat runZero configuration and operational processes as code wherever possible.

• Establish version control, peer review, automated testing, release controls and rollback procedures for platform changes.

• Define service-level indicators and objectives for discovery coverage, data freshness, integration health, scan success, alert delivery and remediation workflow reliability.

• Implement dashboards and alerts that detect platform degradation before it affects consumers.

• Create operational runbooks for common failures, including collector or explorer issues, scan failures, integration errors, data-quality problems and access failures.

• Design backup, recovery, disaster-recovery and business-continuity procedures appropriate to the service.

• Conduct capacity, performance and scale assessments as coverage expands across Client environments.

• Manage credentials through approved enterprise secrets-management capabilities; do not embed secrets in scripts, repositories or configuration files.

• Implement role-based access control, privileged-access controls, administrative separation and auditable change history.

• Support security reviews, architecture reviews, privacy assessments, risk assessments and control assurance activities.

Ensure platform data handling, logging, retention, residency and third-party access align with Optus security and regulatory requirements