Senior Security Engineer (Platform Security Focus)
CMC Markets16 hours ago
Sydney, AustraliaSenior
Responsibilities
- Design, implement, and continuously improve security controls protecting customer-facing trading platforms and APIs.
- Partner with Engineering, Development, and DevOps teams to embed security throughout platform design, development, and operations.
- Provide security guidance for new platform capabilities and technology initiatives, including risk identification and control recommendations.
- Support web application protection, identity security, cloud security controls, and broader platform security capabilities.
- Review vulnerability assessments and penetration testing reports, prioritize risks, and drive remediation with engineering teams.
- Lead or support investigations and responses to security incidents affecting trading platforms, services, and customer accounts.
- Support Security Operations with technical investigations and security engineering initiatives.
- Improve security tooling, automation, monitoring, and detection capabilities.
Requirements
- At least five years of experience in Security Engineering, Platform Security, or Application Security roles.
- Experience securing customer-facing platforms, applications, and APIs.
- Strong hands-on experience implementing and managing Web Application Firewalls and other application-layer security controls.
- Strong understanding of authentication, authorization, identity providers, and identity security concepts.
- Experience with application, platform, and cloud architectures and the ability to provide practical security guidance.
- Experience investigating and responding to security incidents affecting customer-facing platforms or digital services.
- Experience reviewing vulnerability assessments and penetration testing reports, prioritizing security risks, and driving remediation.
- Experience implementing and supporting security capabilities across application, platform, and cloud environments.
- Experience in financial services, fintech, trading, banking, or another highly regulated environment is highly desirable.
- Strong communication and stakeholder engagement skills across technical and non-technical teams.
Benefits
- Five days per week in the office.
- Birthday leave and one annual charity day.
- Staff and family CMC Markets Invest trading accounts with $0 trades for domestic and international equity orders.
- Technical and performance training through the learning and development program.
- Access to a benefits and wellbeing hub with retailer discounts and wellbeing resources.
- Free breakfast cereals, condiments, and coffee in the office.
- Culture club activities including fitness, pizza-making classes, social events, trivia, and lawn bowls.
Categories
About CMC Markets
CMC Markets builds online trading and investing platforms for retail and institutional clients, covering CFDs, forex, indices, commodities and share trading, plus Australian stockbroking. The London‑headquartered company, founded in 1989, is publicly listed on the London Stock Exchange and included in the FTSE 250. Revenue comes from spreads, commissions and financing, and offerings span retail platforms (CMC Markets/Invest) and institutional liquidity and APIs (CMC Connect).