Security Engineer | Application & Enterprise Security | Sydney CBD | Hybrid
Looking for a hands-on security role where you actually run, tune and integrate the tooling, not just buy it?
This is a chance to be one of the first engineers in a brand-new Security Engineering function, working across both product and enterprise security in a business that's gearing up for its next stage of growth.
About the opportunity
- Join a leading Australian data and technology business that helps thousands of companies make smarter commercial decisions
- An established platform with fresh investment behind it and ambitious growth plans ahead
- Be part of a newly established Security Engineering function, with real scope to shape how it operates
- Report to a Principal Product Security Engineer and partner closely with Engineering and the wider business
The Role
- Embed security into delivery: integrate SAST, SCA and secrets detection into CI/CD pipelines with automated, actionable feedback for engineers
- Run security reviews, threat modelling and risk assessments across products and applications, and drive practical remediation
- Strengthen software supply chain and CI/CD infrastructure security, and help engineers adopt AI/ML capabilities securely
- Implement, tune and operate enterprise security tools across IAM, EDR, SSE, DLP and email security, applying least privilege and Zero Trust principles
- Improve vulnerability management, detection, alert workflows and incident response, and support ISO 27001 and SOC 2 compliance
What you'll bring
- Hands-on experience across multiple security domains, with the versatility to work across both product and enterprise security
- Application security experience in cloud-native or SaaS environments: secure code review, threat modelling, SAST/SCA tooling and vulnerability management
- Working knowledge of cloud security, ideally AWS (IAM, networking, Security Hub, Inspector or GuardDuty)
- Strong understanding of identity and access, including SSO, OAuth, OIDC, SAML and conditional access
- Scripting and automation skills in Python, Bash or via APIs, plus the ability to explain risk clearly to engineers and non-technical stakeholders
Also valued: familiarity with EDR, SSE/SWG, DLP, email security and ASPM tools, and exposure to ISO 27001, SOC 2 and the OWASP Top 10.
Culture
- A business that has been recognised several times as a great place to work
- Collaborative, pragmatic approach to security: enabling engineers rather than slowing them down
- Suits someone curious and adaptable who enjoys variety across a broad range of security challenges
- Clear six-month goals, so you'll know exactly where you can make an impact from day one
What's on offer
- Hybrid working from a Sydney CBD office
- The chance to help build a security function from the ground up
#J-18808-Ljbffr
Senior Security Engineer (AppSec) in Sydney employer: PRA
Join a dynamic global retailer in Melbourne's Eastern Suburbs as an eCommerce Technology Manager, where you'll lead a talented team and drive innovative digital solutions. With a focus on technology leadership and significant autonomy, this role offers a collaborative work culture, competitive salary, and ample opportunities for professional growth within a fast-paced environment. Experience the unique advantage of being at the forefront of digital transformation while working closely with senior stakeholders to shape the future of the online platform.
