Senior Cyber Security Governance & DevSecOps Engineer
Candidates must have full working rights
We are seeking an experienced Senior Cyber Security Analyst - AI SDLC to play a critical role in strengthening security controls, risk management, and governance across enterprise application development environments.
As a key member of the Cyber Security team, you will drive secure-by-design practices, establish automated governance controls within CI/CD pipelines, and provide expert guidance on application security risks and compliance requirements.
Key Responsibilities
Design, implement, and maintain security governance controls within enterprise CI/CD environments.
Develop and enforce automated quality gates across platforms such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, Harness, Docker, and JFrog.
Lead the assessment, evaluation, and management of application security risks and vulnerabilities.
Facilitate risk acceptance and exemption processes, ensuring appropriate governance and stakeholder approvals.
Produce high-quality technical documentation, including security instructions, architectural handovers, governance standards, and risk assessment reports.
Collaborate with development, engineering, architecture, and security teams to embed DevSecOps best practices.
Monitor compliance with security policies, standards, and regulatory requirements.
Provide expert advice on vulnerability management,



risk scoring methodologies, and remediation strategies.
About You
To be successful in this role, you will have:
10+ years of experience in Cyber Security.
5+ years of hands‐on experience in Cyber Security Engineering, Application Security (AppSec), or DevSecOps, with a solid focus on Governance, Risk, and Compliance (GRC).
Proven experience designing and implementing automated governance and quality controls within enterprise CI/CD pipelines.
Strong technical expertise across modern DevSecOps tooling, including:
GitHub Actions
Jenkins
Docker
JFrog
Deep understanding of:
Application security vulnerabilities
Secure Software Development Lifecycle (SSDLC)
Risk assessment and mitigation
Governance and exemption approval frameworks
Exceptional written communication skills with the ability to develop:
Technical instructions
Security standards
Risk and compliance reports
Excellent stakeholder engagement and communication skills across technical and business audiences.
Why Join Us?
Work on large-scale enterprise security transformation initiatives.
Influence security governance practices across critical technology platforms.
Collaborate with highly skilled cyber security and engineering professionals.
Competitive salary and benefits package.
Flexible and supportive working environment.
#J-*****-Ljbffr

📌 Senior Security Analyst (Sydney)
🏢 Paxus
📍 Sydney