About UsAt Sapia.ai, we’re pioneering the future of ethical, AI-powered hiring. With millions of candidates engaging with our Chat Interview every year, we are redefining how talent is discovered, assessed, and nurtured. Our products are trusted by some of the world’s most innovative companies, and we’re just getting started.

Why this role existsCandidates trust us with their stories, and the world’s leading employers trust us with their hiring. That trust depends on security being built into how we work, not added later. This role exists to make security part of how we build: closing audit findings, hardening our cloud, testing our own defences before anyone else does, and making the secure path the default path for every engineer on the team.

You’ll be the security-focused engineer in our DevOps team, reporting to the Principal DevOps & MLOps Engineer and working closely with our Head of GRC.

What you’ll doSecurity operations and compliance

- Own security findings from audits, customer security reviews and compliance monitoring through to resolution and evidence, keeping us continuously audit-ready
- Monitor and respond to alerts from threat detection, vulnerability scanning, WAF and audit logging, and track incidents through to closure

Security infrastructure

- Build and run security tooling as code: WAF rules, container and code scanning, and security logging and alerting that makes suspicious activity fully traceable
- Harden our multi-account AWS environment through TLS configuration, encryption, secrets management and least-privilege access

Penetration testing and vulnerability remediation

- Run internal penetration tests and threat modelling across our applications, APIs and cloud, and manage third-party pentest engagements from scoping to report
- Drive remediation with engineering teams within agreed SLAs, and automate the vulnerability workflow from detection through to verified fix

Access management

- Own access to internal systems (VPN, cloud accounts, databases, source control and AI tools),



including joiner, mover and leaver processes and periodic access reviews
- Apply our AI governance policy when assessing new tools, connectors and integrations

Developer experience and platform health

- Improve developer tooling, local environments, CI/CD and onboarding so the secure way to build is also the easiest
- Keep our shared platform healthy through patching, automated dependency updates, and library and runtime upgrades, working with engineers to resolve what breaks

What you’ll bring

- 3+ years in DevOps, platform engineering, SRE or security engineering, including at least 1 year in a security-focused role
- Deep hands-on AWS security experience: IAM and Identity Center, VPC, WAF, GuardDuty, Inspector, CloudTrail, KMS and Secrets Manager
- Terraform proficiency, plus containers (Docker, ECS or Kubernetes) and CI/CD platforms such as GitHub Actions or Buildkite
- Practical vulnerability management: CVE assessment, scanner triage, and safe patching and dependency upgrades
- Robust application security grounding (OWASP Top 10) and hands-on use of tools such as Burp Suite or OWASP ZAP
- The ability to engage auditors and engineers alike and influence teams to prioritise remediation, with AI tools as part of how you work every day

Nice to have

- Security certifications such as AWS Certified Security – Specialty or OSCP
- Experience supporting SOC 2, ISO 27001 or enterprise customer audits, ideally with Vanta or Drata
- Experience securing AI/LLM systems, including AWS Bedrock, guardrails and prompt injection mitigation
- Identity administration experience: SSO/SAML, Okta or Google Workspace

How we hireWe believe there’s more to you than your CV. So, we start with a chat interview, our very own, designed to uncover your potential and give you the space to share who you are in your own words. You’ll answer 5-6 role-relevant questions over chat. It’s untimed and mobile-friendly. Afterwards, you’ll get personalised insights from the interview, based on your written responses. Our hiring team will reach out to you directly if they’d like to move forward.

📌 DevSecOps Engineer (Australia)
🏢 Sapia.ai
📍 Australia