Senior Security Engineer, x15ventures
Commonwealth Bank of Australia4 days ago
Sydney, AustraliaSenior
Responsibilities
- Embed security controls throughout software development and delivery pipelines, including code, dependency, secrets, container, and infrastructure-as-code scanning.
- Design and improve security controls across AWS and Azure environments, including identity, networking, data protection, logging, workloads, and resilience.
- Implement identity and access controls using Microsoft Entra ID, Conditional Access, Privileged Identity Management, workload identities, and application integrations.
- Configure and improve Microsoft Defender capabilities, investigate alerts, and enhance detection quality, coverage, and automated response.
- Build automation for security monitoring, evidence collection, vulnerability management, control validation, and incident response activities.
- Contribute to detection engineering, security monitoring, vulnerability management, and security incident investigations.
- Provide practical security advice, conduct technical security assessments, and help ventures prioritize remediation plans.
- Mentor security engineers and technical team members and contribute to standards, reusable patterns, playbooks, roadmaps, and technical guidance.
Requirements
- Strong hands-on experience in security engineering, cloud security, DevSecOps, or a closely related discipline.
- Strong AWS and Azure cloud security experience, with deep technical capability in at least one platform.
- Practical experience securing cloud identity and access management, networking, workloads, data, logging, and monitoring.
- Experience with infrastructure-as-code technologies such as Terraform, CloudFormation, or Bicep.
- Experience with CI/CD platforms such as GitHub Actions, Azure DevOps, or GitLab CI.
- Experience implementing static analysis, software composition analysis, secrets scanning, container scanning, and infrastructure-as-code scanning in delivery pipelines.
- Practical knowledge of Microsoft Entra ID, including Conditional Access, privileged access, workload identities, and application integrations.
- Experience with Microsoft Defender products, particularly Defender XDR, Defender for Endpoint, or Defender for Cloud.
- Strong automation and scripting capability using Python, PowerShell, or another suitable language.
- Ability to review technical designs, identify material security risks, and propose realistic solutions.
- Experience supporting vulnerability management, security monitoring, or incident response activities.
- Experience mentoring engineers and supporting the technical development of others.
- Useful qualifications include Microsoft Sentinel, security orchestration and automated response, Kusto Query Language, cloud security posture management, Kubernetes, container platforms, serverless applications, API architectures, OAuth 2.0, OpenID Connect, SAML, GitHub Advanced Security, Microsoft Defender for DevOps, NIST, OWASP, ACSC, security frameworks, regulated technology, and relevant cloud or security certifications.
Benefits
- Work across a diverse portfolio of digital ventures, technologies, and cloud environments rather than a single product or platform.
- Build security capabilities, influence product engineering practices, and see the outcomes of security work in practice.
- Join a small Security team with broad cross-disciplinary exposure and a visible opportunity to shape security engineering operations.
- Advertising end date: 08/10/2026.
About Commonwealth Bank of Australia
Commonwealth Bank of Australia is an ASX-listed bank headquartered in Sydney that provides retail, business, and institutional banking, payments, and wealth services across Australia. Its offerings include transaction and savings accounts, home and business lending, cards, merchant services, digital banking, superannuation, and investment platforms such as CommSec. Founded in 1911, the bank serves millions of customers through branches, contact centres, and online channels.