3 days ago
Melbourne, AustraliaMid Level
Responsibilities
- Conduct vulnerability assessments and coordinate remediation with SRE, Platform Engineering, and product service teams.
- Maintain vulnerability tracking, security posture dashboards, and reporting on remediation velocity and risk trends.
- Implement security gates for dependency scanning, SAST, SCA, and container image scanning in CI/CD pipelines.
- Review code, pull requests, infrastructure changes, and architecture proposals from a security perspective.
- Maintain Kubernetes, network segmentation, RBAC, admission control, container image, secrets management, and service mesh security controls.
- Support infrastructure-as-code security scanning, cloud security posture management, tenant isolation, and access control configuration.
- Participate in security incident response, including investigation, containment, evidence preservation, and documentation.
- Provide technical evidence and validation for SOC 2, ISO 27001, and CIS Benchmarks audits and assessments.
- Explain security requirements to engineering teams and help establish standardized secure development processes.
Requirements
- Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field, or an equivalent combination of education and experience.
- At least 2 years of professional experience in security engineering, infrastructure security, DevSecOps, application security, or a related field.
- Hands-on experience with Azure or AWS and working knowledge of Kubernetes security concepts, including pod security, RBAC, network policies, and admission controllers.
- Experience securing infrastructure-as-code workflows and CI/CD pipelines, including dependency scanning, SAST/SCA integration, and artifact integrity.
- Understanding of SOC 2, ISO 27001, CIS Benchmarks, and OWASP security frameworks and standards.
- Proficiency in Python, Bash, Go, or PowerShell for security automation and tooling.
- Proficiency with C#, JavaScript, or TypeScript.
- Experience or exposure to penetration testing, vulnerability management, and security incident response.
- Strong communication skills and experience with GitHub and/or Azure DevOps pipelines.
- Security+, CEH, GIAC GWAPT, or BSCP certifications are valued.
Benefits
- Hybrid working model combining at-home and in-office work at a local Nintex office.
- Global Gratitude and Recharge Days, flexible paid time off, wellness programs, and counseling resources.
- Paid parental leave, peer recognition and awards, invention and patenting assistance, and paid volunteer time.
- Intercultural learning, community impact opportunities, and tools and programs for learning and professional growth.
Tech Stack
Categories
About Nintex
Nintex builds a SaaS platform for enterprise process and workflow automation, including orchestration, digital forms, document generation, RPA, and process intelligence. Organizations use it to model, automate, and govern business processes and build low-code apps, with options to incorporate AI agents. The company is privately held, headquartered in Bellevue, Washington, and owned by TPG; its software is used by thousands of public- and private-sector customers worldwide.