You are a highly skilled security engineer with deep expertise across cyber security engineering, security design and secure software delivery. You thrive on solving complex security challenges, influencing technical direction through expertise and building practical security solutions that scale across large, distributed environments.

At Commonwealth Bank, our Cyber Security team is one of the most advanced in Australia, operating at scale across cloud, payments and digital banking platforms. Together, we protect the Group, its customers and the broader community.

See yourself in our team

Group Security is part of Technology and brings together security and resilience capabilities spanning cyber security, cyber defence, fraud technology, protective security and business resilience. Our purpose is safeguarding a brighter future for all by securing the Bank, protecting customers and delivering best-in-class security outcomes through governance, protection, detection, response and recovery.

You will be part of the Security Engineering team, operating within a Secure by Design and Devsecops model where security is embedded early and continuously across delivery.

The team:

Partners closely with engineering squads, architects and technology leaders across Group security platforms

Drives security design, threat modelling and control implementation

Enables scalable security through automation, guardrails and engineering patterns

Uplifts engineering capability and security maturity across the domain

Influences secure engineering practices across multiple squads and platforms

Do work that matters

As a Staff Security Engineer, you will be a highly influential individual contributor, driving technical direction and engineering excellence through deep expertise and hands-on delivery.

We are interested in hearing from people who:





Lead complex cyber risk assessments, evaluate control effectiveness, and provide risk-informed recommendations that balance security, customer outcomes, resilience, and delivery objectives.

Define and drive risk assessment approaches, security control standards, and decision frameworks that enable consistent risk management across Group Security platforms.

Lead the design and implementation of scalable security controls, guardrails and automation that enable secure software delivery at scale

Solve complex security engineering challenges spanning application security, cloud security, DevSecOps and secure platform design

Define and evolve reusable security patterns, standards and engineering practices adopted across multiple squads

Partner with engineers, architects and technology leaders to influence technical decisions and deliver secure customer outcomes

Lead threat modelling, security design reviews and technical risk assessments for complex initiatives

Champion Secure by Design principles by embedding security across the software development lifecycle

Act as a technical leader within the engineering community, mentoring engineers and uplifting security engineering capability across the domain

Balance security, customer outcomes, resilience and delivery velocity when solving challenging engineering problems

Drive continuous improvement of security engineering practices, controls and automation capabilities

Skills & experience





Deep expertise across security engineering, secure design and technical risk management within large-scale distributed environments

Strong experience designing, implementing and operating security controls embedded within modern engineering ecosystems

Advanced understanding of AI security, application security, DevSecOps, CI/CD security and secure software delivery practices

Strong knowledge of cloud security across AWS and/or Azure environments

Experience defining and evolving security standards, patterns, guardrails and reusable controls at scale

Proven ability to solve complex and ambiguous security engineering challenges through pragmatic, risk-informed decision making

Solid stakeholder engagement skills with the ability to influence engineers, architects and technology leaders

A track record of driving engineering excellence and uplifting capability through technical leadership, mentoring and coaching.

What we value

Strong judgement and risk-based decision making in complex and ambiguous environments.

Ability to articulate technical risk and control effectiveness to both technical and non-technical audiences.

Strong system design, security architecture and threat modelling expertise

End-to-end ownership of security outcomes

Deep technical problem-solving capability

Focus on secure software delivery, resilience and engineering excellence

A passion for mentoring others and raising engineering standards

The ability to influence through expertise, collaboration and technical leadership

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 ***.

#J-18808-Ljbffr

📌 Staff Security Engineer (New South Wales)
🏢 Commbank
📍 New South Wales