Security Engineer

Job Title: Security Engineer

Location: Sydney (Hybrid)

Salary: $169,000 - $215,000 per annum

Hours: 37.5 hours per week, Monday to Friday

Contract: Permanent, full-time

Incident response is a big part of the work: ransomware recovery, business email compromise and forensic investigations. Background checks are required, and some client work requires a government clearance.

Job summary:

Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. Hybrid, with three days a week in our Sydney office.

Key responsibilities:

• Coordinate external penetration tests and track remediation
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID
• Respond to security incidents and lead the technical investigation
• Own secrets management, key rotation and KMS policies
• Triage bug bounty reports from HackerOne or Bugcrowd
• Assess third-party vendors and SaaS integrations for security risk

What we're looking for:

• 3+ years in security engineering, application security or a related engineering role
• Good judgment on risk: knowing what to fix now and what can wait
• Programming or scripting ability in Python, Go or similar
• Ability to explain security issues to engineers without lecturing them
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities

Why work with us:

• Superannuation on top of salary
• Paid parental leave
• Employee assistance program

Aboriginal and Torres Strait Islander people are encouraged to apply.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Sydney Secure.