We are looking for an experienced Principal Security Engineer with strong expertise across Cloud Security, Application Security, IAM, DevSecOps, Security Architecture and Governance, Risk & Compliance (GRC). Key Skills Required:
• Strong experience in AWS and/or GCP Cloud Security.
• Security Architecture, Zero Trust and Threat Modelling.
• Application Security (AppSec) and DevSecOps.
• IAM – SSO, OAuth 2.0, SAML and PAM.
• Security automation, CI/CD, SAST, DAST and SCA.
• Infrastructure as Code – Terraform and Ansible.
• Security Risk Assessments and Risk Management.
• Regulatory compliance – APRA CPS 234, CPS 230, ISO 27001 and NIST CSF.
• Solid stakeholder management, consulting and technical leadership skills. Preferred: CISSP, CISM, CCSP or cloud security certifications. Note: Candidates must have broad cybersecurity experience combining hands-on security engineering, architecture and risk governance.

📌 Principal Security Engineer (Melbourne)
🏢 XPT Software
📍 Melbourne