Security Engineer | Application & Enterprise Security | Sydney CBD | Hybrid
Looking for a hands-on security role where you actually run, tune and integrate the tooling, not just buy it?
This is a chance to be one of the first engineers in a brand-new Security Engineering function, working across both product and enterprise security in a business that's gearing up for its next stage of growth.
About the opportunity
Join a leading Australian data and technology business that helps thousands of companies make smarter commercial decisions
An established platform with fresh investment behind it and ambitious growth plans ahead
Be part of a newly established Security Engineering function, with real scope to shape how it operates
Report to a Principal Product Security Engineer and partner closely with Engineering and the wider business
The Role
Embed security into delivery: integrate SAST, SCA and secrets detection into CI/CD pipelines with automated, actionable feedback for engineers
Run security reviews, threat modelling and risk assessments across products and applications, and drive practical remediation
Strengthen software supply chain and CI/CD infrastructure security, and help engineers adopt AI/ML capabilities securely
Implement, tune and operate enterprise security tools across IAM, EDR, SSE, DLP and email security, applying least privilege and Zero Trust principles
Improve vulnerability management, detection,



alert workflows and incident response, and support ISO ***** and SOC 2 compliance
What you'll bring
Hands-on experience across multiple security domains, with the versatility to work across both product and enterprise security
Application security experience in cloud-native or SaaS environments: secure code review, threat modelling, SAST/SCA tooling and vulnerability management
Working knowledge of cloud security, ideally AWS (IAM, networking, Security Hub, Inspector or GuardDuty)
Strong understanding of identity and access, including SSO, OAuth, OIDC, SAML and conditional access
Scripting and automation skills in Python, Bash or via APIs, plus the ability to explain risk clearly to engineers and non-technical stakeholders
Also valued: familiarity with EDR, SSE/SWG, DLP, email security and ASPM tools, and exposure to ISO *****, SOC 2 and the OWASP Top 10.
Culture
A business that has been recognised several times as a great place to work
Cooperative, pragmatic approach to security: enabling engineers rather than slowing them down
Suits someone curious and adaptable who enjoys variety across a broad range of security challenges
Clear six-month goals, so you'll know exactly where you can make an impact from day one
What's on offer
Hybrid working from a Sydney CBD office
The chance to help build a security function from the ground up
#J-*****-Ljbffr

📌 Senior Security Engineer (Appsec) (Sydney)
🏢 PRA
📍 Sydney