Principal Security Engineer
Summary
Principal Security Engineer in Melbourne combining hands-on security engineering with architecture and risk governance: cloud security on AWS/GCP, AppSec/DevSecOps, IAM (SSO, OAuth 2.0, SAML, PAM), IaC with Terraform/Ansible, and compliance with APRA CPS 234/230, ISO 27001 and NIST CSF.
We are looking for an experienced Principal Security Engineer with strong expertise across Cloud Security, Application Security, IAM, DevSecOps, Security Architecture and Governance, Risk & Compliance (GRC).
Key Skills Required:
Strong experience in AWS and/or GCP Cloud Security.
Security Architecture, Zero Trust and Threat Modelling.
Application Security (AppSec) and DevSecOps.
IAM – SSO, OAuth 2.0, SAML and PAM.
Security automation, CI/CD, SAST, DAST and SCA.
Infrastructure as Code – Terraform and Ansible.
Security Risk Assessments and Risk Management.
Regulatory compliance – APRA CPS 234, CPS 230, ISO 27001 and NIST CSF.
Strong stakeholder management, consulting and technical leadership skills.
Preferred: CISSP, CISM, CCSP or cloud security certifications.
Note: Candidates must have broad cybersecurity experience combining hands-on security engineering, architecture and risk governance.