Security Engineer

About the role

We are seeking an experienced Security Engineer to design, build, and maintain the security posture of Mable's platform and infrastructure. This senior individual contributor role sits at the intersection of engineering and security, embedding security thinking directly into how we build and operate systems.

Key responsibilities

• Design and implement security controls across platform, applications, and infrastructure, including access controls, encryption, network segmentation and endpoint protection.
• Embed security into the software development lifecycle by participating in design reviews, threat‑modelling sessions and code reviews.
• Lead vulnerability assessments, coordinate remediation efforts and prioritise fixes based on risk and business impact.
• Monitor systems for suspicious activity and support incident response, including investigation, containment and post‑incident analysis.
• Define and maintain security standards, guidelines and sensible defaults for engineering teams.
• Partner with engineering leads to build security literacy, advise on secure coding practices and tooling.
• Contribute to the assessment and adoption of security tooling such as SIEM, vulnerability scanners, secrets management and intrusion detection.
• Support compliance with Australian privacy and security frameworks (Privacy Act, ISO 27001, Essential Eight).

Required profile

• 8+ years of experience in security engineering, application security or systems security.
• Strong understanding of secure software design principles, OWASP Top 10, CWE and remediation in cloud‑native environments.
• Hands‑on experience with cloud security, preferably AWS (IAM, network security groups, secrets management, secure infrastructure configuration).
• Experience with security tooling such as SIEM, vulnerability scanners, DAST/SAST, intrusion detection and endpoint protection.
• Demonstrated ability to conduct threat modelling and security design reviews.
• Working knowledge of Australian compliance frameworks (Privacy Act, Essential Eight, ISO 27001).

Required skills

• AWS
• IAM
• Network security groups
• Secrets management
• SIEM
• Vulnerability scanning
• DAST
• SAST
• Intrusion detection
• Endpoint protection
• Threat modelling
• Secure software design
• OWASP Top 10
• CWE

What we offer

• Learning from industry experts, experienced leaders and on‑the‑job opportunities.
• Parental leave: 14 weeks paid for primary carers, 6 weeks paid for secondary carers plus superannuation.
• Hybrid workplace with flexibility between office and remote work.
• Flexi leave days: one extra paid leave day per quarter.
• Floating public holiday to celebrate significant personal days.
• Reward and Recognition program to celebrate wins and great performance.