Security Engineer | Application & Enterprise Security | Sydney CBD | Hybrid

Looking for a hands-on security role where you actually run, tune and integrate the tooling, not just buy it?

This is a chance to be one of the first engineers in a brand-new Security Engineering function, working across both product and enterprise security in a business that's gearing up for its next stage of growth.

About the opportunity

Join a leading Australian data and technology business that helps thousands of companies make smarter commercial decisions

An established platform with fresh investment behind it and ambitious growth plans ahead

Be part of a newly established Security Engineering function, with real scope to shape how it operates

Report to a Principal Product Security Engineer and partner closely with Engineering and the wider business

The Role

Embed security into delivery: integrate SAST, SCA and secrets detection into CI/CD pipelines with automated, actionable feedback for engineers

Run security reviews, threat modelling and risk assessments across products and applications, and drive practical remediation

Strengthen software supply chain and CI/CD infrastructure security, and help engineers adopt AI/ML capabilities securely

Implement, tune and operate enterprise security tools across IAM, EDR, SSE, DLP and email security, applying least privilege and Zero Trust principles

Improve vulnerability management, detection,



alert workflows and incident response, and support ISO 27001 and SOC 2 compliance

What you'll bring

Hands-on experience across multiple security domains, with the versatility to work across both product and enterprise security

Application security experience in cloud-native or SaaS environments: secure code review, threat modelling, SAST/SCA tooling and vulnerability management

Working knowledge of cloud security, ideally AWS (IAM, networking, Security Hub, Inspector or GuardDuty)

Strong understanding of identity and access, including SSO, OAuth, OIDC, SAML and conditional access

Scripting and automation skills in Python, Bash or via APIs, plus the ability to explain risk clearly to engineers and non-technical stakeholders

Also valued: familiarity with EDR, SSE/SWG, DLP, email security and ASPM tools, and exposure to ISO 27001, SOC 2 and the OWASP Top 10.

Culture

A business that has been recognised several times as a great place to work

Collaborative, pragmatic approach to security: enabling engineers rather than slowing them down

Suits someone curious and adaptable who enjoys variety across a broad range of security challenges

Explicit six-month goals, so you'll know exactly where you can make an impact from day one

What's on offer

Hybrid working from a Sydney CBD office

The chance to help build a security function from the ground up

📌 Senior Security Engineer (Sydney)
🏢 PRA
📍 Sydney