Senior Cyber Security Engineer

About the role

Compass Education is seeking a Senior Cyber Security Engineer to shape the security roadmap for its all‑in‑one school management platform used by thousands of schools. Working closely with the Head of Technology and senior leadership, you will build a security function from the ground up and protect a critical education SaaS platform.

Key responsibilities

• Develop and maintain a formal risk register, advise leadership on security posture, and set standards for platform, infrastructure and application security.
• Lead penetration testing across web applications, APIs, infrastructure and cloud, including managing third‑party engagements.
• Assess and improve GCP (or AWS) security configuration, harden infrastructure, and review Terraform and CI/CD pipelines.
• Oversee application security, OWASP Top 10 compliance, code reviews and secure SDLC guidance.
• Manage security investigations, data access governance and ensure compliance with Australian, UK and EU privacy laws.
• Lead incident detection and response, maintain business continuity plans and backup strategies.
• Mentor and manage junior security team members.

Required profile

• 5+ years of hands‑on cyber security experience covering both application and infrastructure security.
• Proven ability to communicate technical risk to non‑technical stakeholders and influence senior leadership.
• Experience with Australian SaaS compliance and privacy frameworks.
• Track record of building risk registers and prioritising remediation.

Required skills

• Penetration testing of web apps, APIs, networks and cloud environments.
• Cloud security expertise (GCP or AWS), including IAM, VPC, audit logging and secrets management.
• Infrastructure as code tools such as Terraform and CI/CD pipeline security.
• Application security standards (OWASP Top 10), secure SDLC and code review processes.
• Database security for MongoDB, Redis and SQL databases.
• Relevant certifications (e.g., OSCP, CISSP, CISM) and familiarity with GDPR.

What we offer

• Hybrid working environment based in Melbourne.
• Learning and development budget with dedicated PD funds.
• Employee Assistance Program available 24/7.
• Parental leave for primary and secondary carers.
• Team events, social budget and in‑office perks.
• Employee Referral Program and inclusive culture.