Posted 18d ago
DevSecOps Engineer
KEY POINTS WE FOUND
- Responsible for security remediation across application code and CI/CD environments.
- Collaborate with engineering teams to enhance security practices and reduce vulnerabilities.
- Develop security standards and governance artefacts for the organisation.
- Well-established Australian financial services organisation serving millions of customers.
- Technology-led environment embracing cloud, DevSecOps, and modern engineering practices.
- Strong culture of innovation, flexibility, and continuous learning.
This is a highly technical, engineering-focused security position responsible for owning and executing security remediation across application code, dependencies, repositories, and CI/CD environments. You'll work closely with platform and engineering teams to improve security guardrails, reduce recurring vulnerabilities, and embed security into the software delivery lifecycle.
- Proven experience remediating security vulnerabilities across modern application and API environments.
- Strong development and scripting capability using Node.js, TypeScript, and Python.
- Hands-on experience with SAST, DAST, SCA, and secure code remediation practices.
- Strong GitHub security administration and repository governance experience.
- Experience working with cloud-native technologies, containers, serverless platforms, and infrastructure-as-code.
- Practical knowledge of CI/CD security engineering, automated security testing, and DevSecOps best practices.
- Remediate application security findings identified through automated scanning and security assessments.
- Resolve vulnerable open-source and third-party dependency risks through upgrades, replacement, or removal strategies.
- Enhance GitHub and CI/CD security controls, including repository baselines, secrets protection, and security automation.
- Partner with engineering, product, and platform teams to coordinate and validate remediation activities.
- Develop security guardrails, engineering standards, playbooks, and governance artefacts that reduce recurring risk.
- Opportunity to work on modern cloud, API, and platform technologies at scale.
- Flexible hybrid working arrangement with strong emphasis on employee wellbeing.
- Join a security team where you can directly influence engineering standards, tooling, and secure development practices.
Stay Safe While Job Hunting
We vet all employer accounts and do our best to keep job ads safe, but scams can still occur. Be cautious when sharing personal information — never provide financial details or make payments during the application process. For extra security, use the Apply button on our site when proceeding.
Skills
0 of 24 matchedAutomated security testingCi/cd security engineeringCloud-native technologiesCollaboration with engineering teamsCollaborativeContainersDastGithub security administrationInfrastructure-as-codeNode.jsOpen-source dependency managementProblem solvingPythonRemediation of security vulnerabilitiesRepository governanceSastScaSecurity best practicesSecurity guardrails developmentSecurity remediation coordinationSecurity standards and governanceSecurity tooling developmentServerless platformsTypescript
Talenza