Security Engineer | Application & Enterprise Security | Sydney CBD | Hybrid

Looking for a hands-on security role where you actually run, tune and integrate the tooling, not just buy it?

This is a chance to be one of the first engineers in a brand-new Security Engineering function, working across both product and enterprise security in a business that's gearing up for its next stage of growth.

About the opportunity

- Join a leading Australian data and technology business that helps thousands of companies make smarter commercial decisions
- An established platform with fresh investment behind it and ambitious growth plans ahead
- Be part of a newly established Security Engineering function, with real scope to shape how it operates
- Report to a Principal Product Security Engineer and partner closely with Engineering and the wider business

The Role

- Embed security into delivery: integrate SAST, SCA and secrets detection into CI/CD pipelines with automated, actionable feedback for engineers
- Run security reviews, threat modelling and risk assessments across products and applications, and drive practical remediation
- Strengthen software supply chain and CI/CD infrastructure security, and help engineers adopt AI/ML capabilities securely
- Implement, tune and operate enterprise security tools across IAM, EDR, SSE, DLP and email security, applying least privilege and Zero Trust principles
- Improve vulnerability management, detection,



alert workflows and incident response, and support ISO 27001 and SOC 2 compliance

What you'll bring

- Hands-on experience across multiple security domains, with the versatility to work across both product and enterprise security
- Application security experience in cloud-native or SaaS environments: secure code review, threat modelling, SAST/SCA tooling and vulnerability management
- Working knowledge of cloud security, ideally AWS (IAM, networking, Security Hub, Inspector or GuardDuty)
- Strong understanding of identity and access, including SSO, OAuth, OIDC, SAML and conditional access
- Scripting and automation skills in Python, Bash or via APIs, plus the ability to explain risk clearly to engineers and non-technical stakeholders

Also valued: familiarity with EDR, SSE/SWG, DLP, email security and ASPM tools, and exposure to ISO 27001, SOC 2 and the OWASP Top 10.

Culture

- A business that has been recognised several times as a great place to work
- Cooperative, pragmatic approach to security: enabling engineers rather than slowing them down
- Suits someone curious and adaptable who enjoys variety across a broad range of security challenges
- Clear six-month goals, so you'll know exactly where you can make an impact from day one

What's on offer

- Hybrid working from a Sydney CBD office
- The chance to help build a security function from the ground up

#J-18808-Ljbffr

📌 Senior Security Engineer (AppSec) (Sydney)
🏢 PRA
📍 Sydney