Senior Security Engineer

About the Role

As a Senior Platform Security Engineer at CMC Markets ANZ, you will play a crucial role in securing customer-facing trading and investment platforms. This position involves working hands-on to enhance platform security, ensuring robustness, and collaborating closely with technology and security teams to identify and mitigate risks, establish security measures, and support incident management.

Key Responsibilities

• Guiding security practices throughout the software delivery lifecycle by reviewing platform designs and instituting safeguards to protect trading platforms and customer accounts.
• Designing, implementing, and continuously refining security controls to safeguard customer-facing trading platforms and APIs.
• Collaborating with Engineering, Development, and DevOps teams to integrate security into platform design, development, and operations.
• Providing expert security advice for new platform features and technology projects to identify risks and apply proper security mechanisms.
• Enhancing platform security capabilities related to web applications, identity security, and cloud protections.
• Analyzing vulnerability assessments and penetration test results, and working with engineering teams to prioritize and address security flaws.
• Leading or assisting investigations and responses to security incidents impacting trading platforms and services.
• Supporting Security Operations with technical expertise, incident investigations, and security engineering projects.
• Driving ongoing improvements by enhancing security tools, automation processes, monitoring, and detection systems.

Qualifications and Experience

• A minimum of 5 years in Security Engineering, Platform Security, or Application Security roles.
• Experience in financial services, fintech, trading, banking, or similarly regulated environments is strongly preferred.
• Proven ability to secure customer-facing platforms, applications, and APIs, ideally within highly regulated sectors.
• Hands-on experience with Web Application Firewalls (WAFs) and other application-layer security technologies.
• Comprehensive understanding of authentication, authorization, identity providers, and identity security principles.
• Familiarity with application, platform, and cloud architectures and the capability to assess and advise on security risks effectively.
• Demonstrated skill in incident investigation and response concerning customer-facing systems.
• Experience reviewing security assessments and penetration tests, along with driving risk remediation.
• Competence in implementing and maintaining security functions across applications, platforms, and cloud environments.
• Strong communication and stakeholder engagement skills, comfortable working with both technical teams and business units.

Workplace Benefits

• Birthday leave to spend time with loved ones plus an annual charity day for community contribution.
• Zero brokerage fees for staff and family equity trades on CMC Markets Invest accounts, domestic and international.
• Continuous learning opportunities covering both technical and performance training.
• Unlimited access to a dedicated benefits and wellbeing hub offering retailer discounts and health-focused resources.
• Collaborative company culture with mandatory five-day office work to foster team synergy.
• Office perks including complimentary breakfast cereals, condiments, coffee, and social events ranging from fitness and cooking classes to trivia and lawn bowls.

Our Commitment

CMC Markets values diversity and inclusion, fostering a workplace where all employees feel confident, appreciated, and empowered to deliver their best. We welcome applicants who may not meet every qualification as we consider all candidates for current and future openings.

Important Application Notes

Be cautious of fraudulent job postings. CMC Markets will not request sensitive personal information prior to making an offer. Official communications will only be through verified CMC Markets Talent Acquisition representatives via email or phone, and never through social media platforms like Facebook or Telegram.