If you care about protecting the services people use to trade and invest, this work has a clear purpose. At CMC Markets, you'll join a global leader in CFD trading and share investing. You'll help deliver the ultimate trading experience for customers.

We're looking for a Senior Application Security Engineer to enhance the security and resilience of CMC's customer facing trading platforms. As part of the APAC Security team, you will provide hands on security engineering expertise across the organisation's trading platforms, working closely with the wider Security team and partnering with technology teams to identify and manage security risks, implement effective security controls, and support the prevention, investigation and response to security incidents.

This is a hands on security engineering role focused on protecting customer facing trading platforms. You will work across the software delivery lifecycle to provide security guidance, review new platform capabilities and designs, implement security controls, and drive continuous improvements to the organisation's platform security posture. Provide feedback on how to improve the platform and have an oversight.

This role will have a dedicated focus on the security of CMC's stockbroking platform. You'll deliver security services for the platform, improve its security controls and help build current security capabilities. This is not operational role, In this role, you'll combine technical expertise with hands-on delivery, applying your technical judgement to solve complex security challenges, build trusted relationships across teams, and drive meaningful security outcomes.

What you'll do

- Your work will span the software delivery lifecycle. You'll give security guidance,



review platform designs and put controls in place. You'll also improve how CMC protects its trading platforms, services and customer accounts.
- Design, implement and continuously improve security controls protecting CMC's customer-facing trading platforms and APIs.
- Partner with Engineering, Development and DevOps teams to embed security throughout the design, development and operation of customer-facing platforms.
- Provide security guidance for new platform capabilities and technology initiatives, helping engineering teams identify security risks and implement appropriate security controls.
- Support and enhance platform security capabilities, including web application protection, identity security and cloud security controls.
- Review vulnerability assessments and penetration testing reports, partnering with engineering teams to prioritise and remediate security risks.
- Lead or support the investigation and response to security incidents affecting customer-facing trading platforms, services and customer accounts.
- Support the wider Security Operations function with technical expertise, investigations and security engineering initiatives.
- Drive continuous improvements to platform security through enhancements to security tooling, automation, monitoring and detection capabilities.

What will help you be successful?





- 5+ years experience in Application Security, Security Engineering, Platform Security or Application Security roles.
- Experience in financial services, fintech, trading, banking or another highly regulated environment is highly desirable.
- Demonstrated experience securing customer facing platforms, applications and APIs, preferably within financial services, fintech or other highly regulated environments.
- Strong hands on experience implementing and managingWeb Application Firewalls (WAFs) and other application layer security controls.
- Strong understanding of authentication, authorisation, identity providers and identity security concepts.
- Experience working with application, platform and cloud architectures, with the ability to identify security risks and provide practical security guidance to engineering teams.
- Demonstrated experience investigating and responding to security incidents affecting customer-facing platforms or digital services.
- Experience reviewing vulnerability assessments and penetration testing reports, prioritising security risks and driving remediation activities.
- Experience implementing and supporting security capabilities across application, platform and cloud environments.
- Excellent communication and stakeholder engagement skills, with the ability to work effectively across both technical and non-technical teams.
- Experience within financial services, fintech, trading or other highly regulated industries is highly desirable.
- Able to identify and provide constructive feedback in relation to the platform

Why You'll like working here

- Leave benefits: Enjoy your birthday off to spend

📌 Senior Application Security Engineer (Sydney)
🏢 CMC Markets ANZ
📍 Sydney