Principal Security Engineer | Cyber Security Advisor | Contract
Summary
12-month contract (extendable) in Melbourne with Australian IT & cyber security services firm The Missing Link. The senior advisor leads security architecture reviews, threat modelling, risk assessments, and embeds secure controls across AWS/GCP, IAM, and DevSecOps/CI-CD in a regulated enterprise environment.
About The Missing Link
The Missing Link is a leading Australian IT and Cyber Security services provider. We’re seeking an experienced Principal Security Engineer / Cyber Security Advisor for a 12-month contract engagement in Melbourne, with potential for extension.
This is a senior, consulting-led role combining security engineering, architecture, cloud security and cyber risk advisory within a complex enterprise environment.
About the Role
You’ll act as a trusted technical security advisor, working across engineering, architecture and business teams to deliver secure-by-design solutions and pragmatic, risk-based security controls.
The environment spans AWS/GCP, application security, IAM, DevSecOps, network security, threat modelling and governance, with a strong focus on Australian financial services regulation.
Requirements
Key Responsibilities
- Lead security architecture reviews, solution assessments and threat modelling
- Conduct comprehensive security risk assessments
- Design secure architecture patterns, controls and cloud security standards
- Provide security guidance across AWS and/or GCP
- Embed security controls into DevSecOps and CI/CD environments
- Advise across IAM, SSO, PAM and federated identity
- Develop practical, risk-based controls and manage security exceptions
- Partner with engineering, architecture, risk and business stakeholders
- Ensure solutions align with relevant regulatory and security frameworks
- Provide senior technical security leadership and mentoring
About You
You’re an experienced security practitioner with broad capability across security engineering, architecture and risk, rather than a specialist in only one security technology.
Essential Experience
- Significant senior-level cyber security engineering or security architecture experience
- Strong AWS and/or GCP cloud security capability
- Security architecture, threat modelling and risk assessment experience
- Strong knowledge across IAM, AppSec, network security and DevSecOps
- Experience with CI/CD security, SAST, DAST, SCA and security automation
- Understanding of Terraform/IaC, Docker and Kubernetes
- Experience with modern identity platforms such as Microsoft Entra ID and/or Okta
- Strong understanding of risk-based security control design
- Experience working in highly regulated enterprise environments
- Knowledge of APRA CPS 234, CPS 230, ISO 27001, NIST CSF, Essential Eight and the Privacy Act 1988
- Strong stakeholder management and the ability to influence technical and senior business stakeholders
Desirable Certifications
CISSP, CISM, CCSP, AWS Security Specialty or Google Professional Cloud Security Engineer certifications will be highly regarded but are not mandatory.
Benefits
Contract Details
- 12-month contract, with potential extension
- Melbourne
- Hybrid
- Senior / Principal-level engagement
Apply Now
If you’re a senior Security Engineer, Security Architect or Cyber Security Advisor looking for a long-term Melbourne contract where you can combine hands-on security expertise with strategic advisory and risk, we’d like to hear from you.
Skills
As published by workable · 3 questions
Basics
First name, Last name, Email, Headline, Phone, Address, Photo, Education, Experience, Summary, Resume, Cover letter
Pick from a list (3)
- Have you personally conducted security risk assessments and translated identified risks into technical security controls or compensating controls?
- Have you worked within a highly regulated enterprise environment, ideally banking or financial services?
- Do you have unrestricted working rights to work in Melbourne?