Platform Security Engineer
Summary
A 12-month fixed-term, hybrid security engineering role in Sydney CBD focused on remediating application vulnerabilities and embedding DevSecOps across code, dependencies, GitHub, and CI/CD pipelines for a large Australian financial services organisation. Core tech: Node.js, TypeScript, Python, SAST/DAST/SCA, and cloud-native platforms.
Salary: Up to $170000.00 p.a. + incl Super
12 Month FTC | WFH Hybrid | Sydney CBD
About the Company
- Well-established Australian financial services organisation serving millions of customers.
- Technology-led environment embracing cloud, DevSecOps, and modern engineering practices.
- Strong culture of innovation, flexibility, and continuous learning.
About the Role
This is a highly technical, engineering-focused security position responsible for owning and executing security remediation across application code, dependencies, repositories, and CI/CD environments. You'll work closely with platform and engineering teams to improve security guardrails, reduce recurring vulnerabilities, and embed security into the software delivery lifecycle.
About You
- Proven experience remediating security vulnerabilities across modern application and API environments.
- Strong development and scripting capability using Node.js, TypeScript, and Python.
- Hands-on experience with SAST, DAST, SCA, and secure code remediation practices.
- Strong GitHub security administration and repository governance experience.
- Experience working with cloud-native technologies, containers, serverless platforms, and infrastructure-as-code.
- Practical knowledge of CI/CD security engineering, automated security testing, and DevSecOps best practices.
Key Responsibilities
- Remediate application security findings identified through automated scanning and security assessments.
- Resolve vulnerable open-source and third-party dependency risks through upgrades, replacement, or removal strategies.
- Enhance GitHub and CI/CD security controls, including repository baselines, secrets protection, and security automation.
- Partner with engineering, product, and platform teams to coordinate and validate remediation activities.
- Develop security guardrails, engineering standards, playbooks, and governance artefacts that reduce recurring risk.
Benefits
- Opportunity to work on modern cloud, API, and platform technologies at scale.
- Flexible hybrid working arrangement with strong emphasis on employee wellbeing.
- Join a security team where you can directly influence engineering standards, tooling, and secure development practices.