MiClub is looking for a talented Software Engineer with a strong interest in application security to join our product development team based in Perth. Our product team has developed golf and club management products that have changed our industry and our innovation will continue to influence the future.

As a MiClub Software Engineer you will be working alongside our team of engineers to update/enhance our cloud-based golf management software, club membership management and communications products. Our platforms handle member data, payments and identity for hundreds of thousands of golfers and members, so this role carries a particular focus on building and maintaining secure software. You will help evolve user authentication, protect our APIs, and defend our booking systems against automated abuse.

This is a hands-on engineering role. You will spend most of your time building product features, with security as the lens you bring to that work rather than as a separate function.

You will be mentored by our experienced team and given significant responsibility to work on our products. The ideal applicant will have three or more years commercial Java experience, a genuine interest in secure development practices, and be keen to take on more responsibility and further develop your skills.

If you have enthusiasm, love problem solving, love owning your own work and are up for a challenge this role will suit you well.

We offer flexible work conditions (including work from home options) and a highly collaborative work environment that provides a great work/life balance, experienced mentoring and an excellent culture.

We are well established leaders in the golf club industry, so if you are a golfer then outstanding, but it’s not essential.

About MiClub





MiClub is an Australian based company employing over 60 staff with offices located in Perth, Melbourne, Sydney and Brisbane. We are specialist developers in golf and club management software servicing over 1,000 clubs and courses. Thousands of golfers and members use our products every day!

The MiClub work culture is friendly and fast paced with regular group activities including our own social golf club, lunches, birthday celebrations and special events. This role is a great opportunity to join a small busy team within a market leading company.

Key responsibilities

• Design, develop, and test code that conforms to business requirements, with security considered from design through to release.

• Build and maintain authentication and authorisation flows across our web and mobile products, including OAuth2/OIDC, session management and service-to-service authentication.

• Review and harden our REST APIs — authorisation checks on every endpoint, input validation, rate limiting and protection against common API vulnerabilities.

• Contribute to threat modelling and security design reviews for new features before they are built.

• Triage and remediate findings from penetration tests, dependency scanning and static analysis, and help the team prioritise what matters most.

• Help defend high-demand endpoints, such as tee time bookings, against scraping, bots and automated abuse.





• Ensure quality of software produced, including peer code review against our secure coding standards.

• Estimating, planning and managing of all tasks required to meet the software objectives.

• Independently seek and identify new tools/techniques to improve product development and strengthen our security posture.

• Interact with users, third parties, and key MiClub stakeholders to clarify the business requirements.

Experience and Qualifications

• Completed Computer Science degree.

• Three years or more commercial Java experience.

• Good understanding of Relational Databases.

• Knowledge of Hibernate, Spring, and PrimeFaces.

• A working understanding of the OWASP Top 10 and common web application vulnerabilities, and the ability to explain why a given mitigation works.

• Experience configuring Spring Security, or a comparable framework, beyond its defaults.

• Familiarity with modern authentication protocols (OAuth2, OIDC, JWT) and their common failure modes.

Desirable

• Experience with mobile application security — certificate pinning, app attestation, secure token storage.

• Exposure to security tooling such as Burp Suite, Snyk, OWASP Dependency-Check or SonarQube.

• Experience working with payment systems or in another regulated environment.

• Participation in CTFs or bug bounty programs, or security certifications such as Security+, CSSLP or OSCP. Valued, but not required — we are equally interested in engineers who have learned security on the job.

Please note

• You must have permanent Australian work rights to apply for this role.

• Salary will be determined by your relevant experience.

• Only short-listed candidates will be contacted.

📌 Software Developer (Java) (Osborne Park)
🏢 MiClub Services
📍 Osborne Park