Senior Security Engineer

About the role

Austroads' Transport Certification Australia division is looking for a Senior Security Engineer to strengthen its security posture. The role strengthens cloud-native and third-party security solutions, supports operational teams and ensures technical controls are effective, scalable and aligned with business and compliance needs. It is based in the Austroads Sydney or Melbourne office, reports to the Head of IT Operations and is a full-time position.

Key responsibilities

• Design, implement and manage cloud security controls in Azure and AWS, including IAM, network security, logging and monitoring, aligned with CIS, Essential Eight and ISO 27001
• Deploy and maintain tools such as XDR, Zero Trust, vulnerability scanners and CSPM platforms, and integrate them with alerting, logging and reporting
• Implement endpoint, network and identity security controls and carry out configuration reviews and system hardening
• Support technical assurance activities such as penetration testing and remediation tracking
• Work with security operations, risk and compliance teams on incident response, forensics, risk assessments and compliance, and backfill during peak periods
• Support the Information Security Team, contribute to continuous improvement and maintain quality systems processes

Required profile

• Significant experience in cybersecurity engineering with strong hands-on experience in Azure and AWS
• Proven experience implementing and managing security tools and platforms
• Strong understanding of cloud-native security, identity and access management and infrastructure hardening
• Familiarity with ISO 27001, NIST, CIS and ACSC Essential Eight
• Ability to work independently, with discretion, confidentiality and attention to detail, in a fast-paced environment

Required skills

• Desirable: CISSP, AWS Certified Security Specialty, or Microsoft Azure Security Engineer Associate
• Desirable: scripting or automation (PowerShell, Python, Terraform)
• Desirable: container security, CI/CD pipelines and DevSecOps exposure
• Desirable: regulatory compliance and technical audit support experience