Senior Cyber Security Analyst in Sydney

Senior Cyber Security Analyst - AI SDLC | Dev Sec Ops

A large enterprise organisation is currently seeking an experienced Senior Cyber Security Analyst to assist to assist with build, testing, deployment and operations ofsecurity controls into Dev Sec Ops pipelines across the software development lifecycle.

This position combines hands-on implementation with governance, risk and compliance, working closely with engineering, infrastructure and operational teams.

Key Responsibilities

• Gather security requirements and design, implement and test automated security gates within CI/CD pipelines.
• Optimise controls to minimise false positives and maintain efficient developer workflows.
• Manage security exemptions, bypass requests and risk acceptances, including mitigating controls and application risk registers.
• Track security assessments and compliance activities in One Trust, mapping controls and supporting evidence to regulatory and internal requirements.
• Collaborate with infrastructure teams to integrate controls into infrastructure-as-code and cloud landing zones.
• Produce operating procedures, implementation plans and handover documentation to support operational readiness.
• Facilitate stakeholder workshops, assess change impacts and report security risks, metrics and performance to senior leadership.
• Overview

A large enterprise organisation is currently seeking an experienced Senior Cyber Security Analyst to assist to assist with build, testing, deployment and operations ofsecurity controls into Dev Sec Ops pipelines across the software development lifecycle.

This position combines hands-on implementation with governance, risk and compliance, working closely with engineering, infrastructure and operational teams.

Key Responsibilities

• Gather security requirements and design, implement and test automated security gates within CI/CD pipelines.
• Optimise controls to minimise false positives and maintain efficient developer workflows.
• Manage security exemptions, bypass requests and risk acceptances, including mitigating controls and application risk registers.
• Track security assessments and compliance activities in One Trust, mapping controls and supporting evidence to regulatory and internal requirements.
• Collaborate with infrastructure teams to integrate controls into infrastructure-as-code and cloud landing zones.
• Produce operating procedures, implementation plans and handover documentation to support operational readiness.
• Facilitate stakeholder workshops, assess change impacts and report security risks, metrics and performance to senior leadership.

Key Requirements

• 10+ years of cyber security experience, including at least 5 years in cyber security, application security or Dev Sec Ops engineering, with a strong governance, risk and compliance focus.
• Proven experience implementing automated security or quality gates within enterprise CI/CD environments.
• Familiarity with tools such as Git Hub Actions, Git Lab CI, Jenkins, Azure Dev Ops, Docker, Harness and JFrog.
• Strong understanding of application vulnerabilities, CVSS risk scoring and formal exemption processes.
• Excellent technical documentation, analytical, organisational and stakeholder management skills.
• Experience delivering technical and process change within large, complex organisations.
• Proficiency in Agile and Waterfall delivery methods.

Contract Rate

$900-$1,000 per Day (incl. super)

Job Ref

• 1264864
• Additional information
• Contract until end of June 2027 (with the view to extend)
• Enterprise Project
• Sydney Norwest Location (Hybrid, 3 days onsite)
• #J-18808-Ljbffr