About The Missing Link

The Missing Link is a leading Australian IT and Cyber Security services provider. We're seeking an experienced Principal Security Engineer / Cyber Security Advisor for a 12-month contract engagement in Melbourne, with potential for extension.

This is a senior, consulting-led role combining security engineering, architecture, cloud security and cyber risk advisory within a complex enterprise environment.

About the Role

You'll act as a trusted technical security advisor, working across engineering, architecture and business teams to deliver secure-by-design solutions and pragmatic, risk-based security controls.

The environment spans AWS/GCP, application security, IAM, DevSecOps, network security, threat modelling and governance, with a strong focus on Australian financial services regulation.

Key Responsibilities

- Lead security architecture reviews, solution assessments and threat modelling
- Conduct comprehensive security risk assessments
- Design secure architecture patterns, controls and cloud security standards
- Provide security guidance across AWS and/or GCP
- Embed security controls into DevSecOps and CI/CD environments
- Advise across IAM, SSO, PAM and federated identity
- Develop practical, risk-based controls and manage security exceptions
- Partner with engineering, architecture, risk and business stakeholders
- Ensure solutions align with relevant regulatory and security frameworks




- Provide senior technical security leadership and mentoring

About You

You're an experienced security practitioner with broad capability across security engineering, architecture and risk, rather than a specialist in only one security technology.

Essential Experience

- Significant senior-level cyber security engineering or security architecture experience
- Strong AWS and/or GCP cloud security capability
- Security architecture, threat modelling and risk assessment experience
- Solid knowledge across IAM, AppSec, network security and DevSecOps
- Experience with CI/CD security, SAST, DAST, SCA and security automation
- Understanding of Terraform/IaC, Docker and Kubernetes
- Experience with modern identity platforms such as Microsoft Entra ID and/or Okta
- Strong understanding of risk-based security control design
- Experience working in highly regulated enterprise environments
- Knowledge of APRA CPS 234, CPS 230, ISO 27001, NIST CSF, Essential Eight and the Privacy Act 1988
- Strong stakeholder management and the to of ..?? - ...??

Desirable Certifications

CISSP, CISM, CCSP, AWS Security Specialty or Google Professional Cloud Security Engineer certifications will be highly regarded but are not mandatory.

Contract Details

- 12-month contract, with potential extension
- Melbourne
- Hybrid
- Senior / Principal-level engagement

📌 Principal Security Engineer | Cyber Security Advisor | Contract (Melbourne)
🏢 The Missing Link
📍 Melbourne