Senior Cyber Security Governance & DevSecOps Engineer

Candidates must have full working rights

We are seeking an experienced Senior Cyber Security Analyst - AI SDLC to play a critical role in strengthening security controls, risk management, and governance across enterprise application development environments.

As a key member of the Cyber Security team, you will drive secure-by-design practices, establish automated governance controls within CI/CD pipelines, and provide expert guidance on application security risks and compliance requirements.

Key Responsibilities

- Design, implement, and maintain security governance controls within enterprise CI/CD environments.
- Develop and enforce automated quality gates across platforms such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, Harness, Docker, and JFrog.
- Lead the assessment, evaluation, and management of application security risks and vulnerabilities.
- Facilitate risk acceptance and exemption processes, ensuring appropriate governance and stakeholder approvals.
- Produce high-quality technical documentation, including security instructions, architectural handovers, governance standards, and risk assessment reports.
- Collaborate with development, engineering, architecture, and security teams to embed DevSecOps best practices.
- Monitor compliance with security policies, standards, and regulatory requirements.
- Provide expert advice on vulnerability management,



risk scoring methodologies, and remediation strategies.

About You

To be successful in this role, you will have:

10+ years of experience in Cyber Security.

5+ years of hands‑on experience in Cyber Security Engineering, Application Security (AppSec), or DevSecOps, with a strong focus on Governance, Risk, and Compliance (GRC).

Proven experience designing and implementing automated governance and quality controls within enterprise CI/CD pipelines.

Strong technical expertise across modern DevSecOps tooling, including:

- GitHub Actions
- Jenkins
- Docker
- JFrog

Deep understanding of:

- Application security vulnerabilities
- Secure Software Development Lifecycle (SSDLC)
- Risk assessment and mitigation
- Governance and exemption approval frameworks

Exceptional written communication skills with the ability to develop:

- Technical instructions
- Security standards
- Risk and compliance reports

Excellent stakeholder engagement and communication skills across technical and business audiences.

Why Join Us?

- Work on large-scale enterprise security transformation initiatives.
- Influence security governance practices across critical technology platforms.
- Collaborate with highly skilled cyber security and engineering professionals.
- Market-competitive salary and benefits package.
- Flexible and supportive working environment.

#J-18808-Ljbffr

📌 Senior Security Analyst (Sydney)
🏢 Paxus
📍 Sydney