Security Engineer

About the role

We are looking for a motivated Security Engineer to expand our security function and keep our platform secure. You will lead vulnerability management, cloud security engineering, and identity/access governance while hardening our enterprise environment to industry standards.

Key responsibilities

• Lead vulnerability management across AWS cloud, applications and on‑premise environments.
• Own and maintain security policies, standards and procedures.
• Produce security metrics and reports for internal and external stakeholders.
• Support audit and compliance activities, including SOC 2 and ISO 27001.
• Monitor security alerts and coordinate incident response with our MSSP (Expel).
• Design and implement scalable IAM and PAM solutions across AWS and enterprise systems.

Required profile

• Experience in security roles such as analyst, engineer or architect.
• Strong AWS security knowledge, including networking, IAM and monitoring tools.
• Solid understanding of vulnerability management and cloud risk.
• Hands‑on experience with IAM/PAM tools and governance practices.
• Scripting or automation skills (Python, Bash or similar).
• Familiarity with SOC 2/ISO 27001 audits and tools such as Expel, ELK stack, Kafka, MongoDB and Spark.

Required skills

• AWS
• IAM
• PAM
• Vulnerability management
• Python
• Bash
• ELK stack
• Kafka
• MongoDB
• Spark
• SOC 2
• ISO 27001
• Expel

What we offer

• Work on a market‑leading US software product built in Australia.
• End‑to‑end exposure across the full software development lifecycle.
• Dynamic startup environment with modern North Sydney offices.
• Flat organisational structure and accessible leadership.
• Daily challenges with fast‑paced, rewarding work.
• Office perks including free food and daily catered lunches.
• Equal opportunity employer committed to diversity and inclusion.