Senior Security Engineer

About Stake

Stake is a pioneering Australian investment platform dedicated to empowering people to confidently grow their wealth. With seamless access to both ASX and Wall Street markets, Stake supports over 750,000 customers and manages in excess of A$8 billion. We aim to continuously transform the financial sector by inspiring investor confidence and making investment accessible to everyone.

Role Overview

We are seeking an experienced Senior Security Engineer to join our Sydney-based Technology team. At Stake, security is integral, collaborating closely with Engineering, Product, and Infrastructure teams to embed protection in all we build. Rather than serving as gatekeepers, we enable development teams to create secure, resilient systems confidently and efficiently.

In this role, you will leverage deep software engineering expertise and sound security judgment to influence how secure software is developed throughout Stake. You will lead critical, large-scale projects spanning multiple teams, shape architecture early, and establish scalable security standards, tools, and practices. Your efforts will boost developer experience while enhancing our security as the business scales.

Key Responsibilities

• Develop and evolve secure engineering best practices adopted across the technology organization.
• Spearhead complex application security programs impacting multiple engineering groups, enhancing system resilience and software development lifecycle security.
• Influence architectural and technical designs early to resolve security complexities without hindering delivery pace.
• Create security automation, tooling, and guardrails enabling engineers to detect and mitigate risks pre-production.
• Elevate the engineering team's security proficiency through mentoring, hands-on support, and educational initiatives.
• Improve Stake's capacity for security incident detection, response, and learning across customer-facing and internal platforms.
• Collaborate with Engineering, Infrastructure, Risk, and Compliance leaders to balance innovation with regulatory compliance through pragmatic security approaches.
• Establish yourself as a trusted technical authority directing secure software engineering practices at scale.

Candidate Profile

• Proven leadership in overseeing multifaceted application security initiatives across varied engineering teams.
• Extensive expertise in application security, secure software development, and modern cloud-native architecture.
• Ability to set technical direction, define standards, and influence decisions effectively without formal authority.
• Skilled in balancing high security standards with practical considerations to protect users while maintaining development velocity.
• A passion for mentoring and elevating organizational security knowledge.
• Excellent communication skills to convey complex security risks and build solid cross-functional relationships.

Additional Advantageous Experience

• Experience defining secure engineering protocols or application security strategies within expanding technology companies.
• Building internal security platforms, developer tools, or automating DevSecOps at scale.
• Leading security assessments of distributed systems, cloud-native platforms, or highly available production environments.
• Background working in fintech, financial services, or other regulated industries.
• Familiarity with security frameworks such as ISO 27001, SOC 2, or the Australian Essential Eight.

Benefits

• Autonomy to work alongside industry experts in a fast-growing company.
• Professional development budget.
• Up to 16 weeks paid parental leave.
• Childcare subsidies.
• Wellbeing programs and support.
• Flexible annual leave with swap days.
• Discretionary performance-based bonuses.
• Product perks including discounted SMSF membership, annual trading credits, and upgraded account features.

Work Arrangement

This role requires spending three days weekly onsite in our pet-friendly Sydney office, supporting a hybrid working model.

Recruitment Information

Stake does not accept resumes from recruitment agencies; unsolicited submissions will not be compensated.