DevSecOps Security Consultant / Engineer (Contract)

About the role

Hastha Solutions has an urgent need for a DevSecOps Security Consultant / Engineer on a 3-month contract in Sydney, with possible extension. The role covers security discovery, assessment and risk evaluation across cloud platforms, applications and development environments, and works closely with DevOps, engineering and application teams. Only Australian or NZ citizens or PR holders are eligible.

Key responsibilities

• Conduct security discovery, assessment and risk evaluation across cloud platforms, applications and development environments.
• Review security posture using Orca Security and GitHub Advanced Security to find vulnerabilities, misconfigurations, exposed assets, code security issues and compliance gaps.
• Analyse cloud workloads, repositories, infrastructure configurations and application architectures, then recommend mitigations.
• Integrate security controls and secure-by-design principles into the SDLC with DevOps and engineering teams.
• Implement security in CI/CD pipelines: automated testing, code scanning, secret detection, dependency analysis and policy enforcement.
• Review findings, prioritise risks by business impact and give remediation guidance; track remediation and improvements.
• Support vulnerability management: identification, reporting, risk assessment and remediation verification.
• Help build DevSecOps standards, security baselines, governance frameworks and procedures.
• Prepare assessment reports, security dashboards, executive summaries and technical recommendations.

Required profile

• 8+ years of experience in cyber security, cloud security, application security or DevSecOps engineering.
• Bachelor's degree in computer science, information security, information technology, engineering or a related field.
• Preferred: cloud security or cybersecurity certifications, enterprise-scale DevSecOps experience, knowledge of compliance frameworks and standards.

Required skills

• Hands-on experience with Orca Security and GitHub Advanced Security.
• DevSecOps, security automation and secure software development.
• CI/CD security integration and cloud security (IAM, network security, data protection, workload security).
• Vulnerability management, risk assessment and remediation tracking.
• Application security, code security testing and software supply chain security.
• Familiarity with AWS, Microsoft Azure and GCP; container, Kubernetes and IaC security.