Security Engineer

About Mable and Attain Healthtech Group

HomeMade, Mable, Leap in!, and Mable Direct are part of the Attain Healthtech Group, united by a commitment to creating lasting positive change in the care and support sector. We leverage technology to enhance outcomes and elevate industry standards.

Mable is a prominent Australian health technology platform facilitating connections between people with disabilities, older Australians, and independent support workers. Since 2014, Mable has coordinated over 25 million support hours and earned multiple industry recognitions.

Role Overview

We are searching for a seasoned Security Engineer to shape and maintain the security integrity of Mable's platform and infrastructure. This senior individual contributor position integrates engineering with security practices, embedding security throughout system design and operation rather than acting solely as an external auditor.

Key Responsibilities

• Develop and apply security controls across applications, infrastructure, and platforms—including access management, encryption, segmentation, and endpoint defense.
• Integrate security principles within the software development lifecycle by engaging in design and code reviews, as well as threat modeling.
• Lead vulnerability evaluations and coordinate risk-based remediation efforts with engineering teams.
• Monitor for suspicious activities and assist incident response, including investigation and post-incident assessments.
• Establish and uphold security standards and best practices, ensuring secure methods are straightforward for engineering teams.
• Educate and support engineers and team leads on secure coding and security tool implementations.
• Evaluate and incorporate security tools such as SIEM, vulnerability scanning, secrets management, and intrusion detection.
• Support adherence to regulatory requirements including Australian Privacy Act, ISO 27001, and Essential Eight frameworks.
• Stay informed of emerging threats and attack vectors, converting insights into actionable organizational recommendations.
• Work alongside Infrastructure Engineers to secure cloud architecture, CI/CD pipelines, and secrets handling.

Required Skills and Experience

• Minimum of eight years' experience in security engineering, application security, or systems security roles.
• Strong knowledge of secure software design, common vulnerabilities (e.g., OWASP Top 10, CWE), and remediation strategies within cloud-native environments.
• Practical expertise in cloud security, preferably AWS, covering IAM, network security groups, secrets management, and infrastructure security.
• Proficient with multiple security tools including SIEM, vulnerability scanners, DAST/SAST, intrusion detection, endpoint protection, and secrets management.
• Capable of conducting thorough threat modeling and security design assessments.
• Understanding of applicable Australian compliance regimes such as the Privacy Act, Essential Eight, and ISO 27001.

Company Culture and Values

We value purpose, boldness, unity, and impact. We innovate and collaborate with passion to produce meaningful change in Australia's care sector.

Benefits

• Career development opportunities with mentorship from industry experts.
• Parental leave options: 14 weeks paid for primary carers and 6 weeks for secondary carers, plus superannuation.
• Flexible hybrid work model balancing office presence and remote work.
• Additional paid leave days each quarter, plus floating public holidays.
• Recognition program celebrating achievements and performance.

Diversity and Inclusion

We embrace diversity and encourage applications from all backgrounds, including Aboriginal and Torres Strait Islander people. Candidates who may not meet every criterion are still encouraged to apply as diverse experiences are valued.

Recruitment Process

Artificial intelligence tools may assist the hiring process by reviewing submissions and flagging inconsistencies, but final decisions are made by humans. For inquiries on data processing, please contact us.