Staff Security Engineer
Commonwealth Bank of Australia11 hours ago
Bengaluru, IndiaStaff+
Responsibilities
- Design and implement secure solutions aligned with group security policies, standards, and reference architectures.
- Perform threat modeling, security requirements analysis, control mapping, vulnerability analysis, and risk identification.
- Collaborate with cross-functional teams to drive security outcomes through product design, build, and run phases.
- Develop reusable security patterns, solutions, strategies, and processes.
- Support Secure by Design, DevSecOps, security automation, technology strategy, and security service automation.
- Provide expert guidance on security engineering practices and support responses to high-profile security incidents.
- Assess Docker, container, Kubernetes, cloud, and AI-based solutions for security risks.
- Mentor engineering squads and security champions on secure design and secure coding practices.
Requirements
- 12+ years of experience in security engineering with strong expertise in secure software development.
- Experience with Secure by Design, DevSecOps, and security automation practices including SAST, DAST, and IAST.
- Experience designing enterprise security guidelines, standards, and practices.
- Hands-on experience with secure design reviews, STRIDE/STRIDE-LM threat modeling, secure code reviews, and risk management.
- Experience authoring and reviewing security assessments, security zone models, data flow diagrams, control objectives, and residual risk analyses.
- Strong understanding of security reference architectures, security patterns, and security zone models.
- Experience assessing technology criticality and risk ratings to right-size security controls and manage control gaps.
- Hands-on experience securing Docker, containers, and Kubernetes environments.
- Experience with AWS/Azure cloud security, cloud reference architectures, workload placement patterns, and native cloud service security assessments.
- Experience partnering with penetration testing teams to map exploits and attack paths.
- Familiarity with GenAI, LLMs, RAG, AI agents, AI threat modeling, and secure AI design.
- Bachelor’s or master’s degree in engineering, Computer Science, or Information Technology.
- Preferred certifications include CISSP, CCSP, and CSSLP.
- Familiarity with financial industry regulations and standards such as APRA and PCI-DSS.
Tech Stack
Categories
About Commonwealth Bank of Australia
Commonwealth Bank of Australia is an ASX-listed bank headquartered in Sydney that provides retail, business, and institutional banking, payments, and wealth services across Australia. Its offerings include transaction and savings accounts, home and business lending, cards, merchant services, digital banking, superannuation, and investment platforms such as CommSec. Founded in 1911, the bank serves millions of customers through branches, contact centres, and online channels.