Senior Security Engineer (Application Security)

Since 2013, the company has expanded from listings into payments, shipping and seller financing. More than 780 employees work on the product, from search ranking to fraud detection. Core hours are 10 to 3, and the rest of the day is flexible.

Job summary

This is a new role. The team has doubled in size over the past year. We're looking for help maturing our controls ahead of an SOC 2 Type II and ISO 27001 audit cycle. This hire will run our application security program: threat modelling, code scanning, pen test follow-up and developer guidance. Remote position. Most of the team is in Brisbane, but nobody is required to come in. Strong written English is important, since much of our work is async.

Key responsibilities

• Review code and pull requests for security issues.
• Manage SAST, DAST and dependency scanning with tools such as Semgrep, Snyk, Burp Suite or GitHub Advanced Security.
• Write secure coding guidelines and run developer training.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.
• Triage bug bounty reports from HackerOne or Bugcrowd.
• Automate security checks in CI/CD pipelines.

Minimum qualifications

• 5+ years in security engineering, application security or a related engineering role.
• Experience with SIEM, EDR or vulnerability management tools.
• Programming or scripting ability in Python, Go or similar.
• Understanding of networking, TLS, PKI and authentication protocols (SAML, OIDC, OAuth 2.0)

Preferred qualifications

• Kubernetes and container security (Falco, OPA Gatekeeper)
• IaC scanning with Checkov or tfsec.

What you get

• Superannuation on top of salary.
• Paid parental leave.
• Annual bonus.
• Employee assistance program.
• Above-award pay rates.
• Novated leasing.
• Study leave.

Shortlisting will begin immediately.

You must have full working rights in Australia.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Juneberry Commerce.