Principal Security Engineer

We are looking for an experienced Principal Security Engineer with strong expertise across Cloud Security, Application Security, IAM, DevSecOps, Security Architecture and Governance, Risk & Compliance (GRC). Key Skills Required: Strong experience in AWS and/or GCP Cloud Security. Security Architecture, Zero Trust and Threat Modelling.

Application Security (AppSec) and DevSecOps. IAM – SSO, OAuth 2.0, SAML and PAM. Security automation, CI/CD, SAST, DAST and SCA. Infrastructure as Code – Terraform and Ansible. Security Risk Assessments and Risk Management. Regulatory compliance – APRA CPS 234, CPS 230, ISO 27001 and NIST CSF. Strong stakeholder management, consulting and technical leadership skills.

Preferred: CISSP, CISM, CCSP or cloud security certifications. Note: Candidates must have broad cybersecurity experience combining hands-on security engineering, architecture and risk governance.