Principal Security Engineer
- Location
- Melbourne, VIC
- Type
- Full-time
About the role
We are looking for an experienced Principal Security Engineer with strong expertise across Cloud Security, Application Security, IAM, DevSecOps, Security Architecture and Governance, Risk & Compliance (GRC).
Key Skills Required:
Strong experience in AWS and/or GCP Cloud Security.
Security Architecture, Zero Trust and Threat Modelling.
Application Security (AppSec) and DevSecOps.
IAM – SSO, OAuth 2.0, SAML and PAM.
Security automation, CI/CD, SAST, DAST and SCA.
Infrastructure as Code – Terraform and Ansible.
Security Risk Assessments and Risk Management.
Regulatory compliance – APRA CPS 234, CPS 230, ISO 27001 and NIST CSF.
Strong stakeholder management, consulting and technical leadership skills.
Preferred: CISSP, CISM, CCSP or cloud security certifications.
Note: Candidates must have broad cybersecurity experience combining hands-on security engineering, architecture and risk governance.
