Senior Security Engineer - Platform Security

About the Role

Join a dynamic team dedicated to revolutionizing the design experience globally. This position is based in Sydney, offering a hybrid working arrangement that balances remote flexibility with on-campus collaboration opportunities at our uniquely designed Sydney campus in Surry Hills. We value autonomy, trusting our team to find the work style that enhances productivity and team goals.

Key Responsibilities

• Implement and enhance security controls across cloud infrastructure, compute, and platform engineering domains.
• Provide expert guidance to infrastructure engineers on best practices and security design patterns for cloud platforms.
• Lead threat modelling and code review initiatives for complex systems and architectures.
• Develop and maintain tools and services to assist engineers in secure software development.
• Research and evaluate emerging security technologies to strengthen platform and infrastructure defenses.
• Identify, assess, and manage vulnerabilities within the organization’s threat landscape.
• Participate in hiring processes and mentor fellow security engineers to foster professional growth.

Required Qualifications and Skills

• Proven experience conducting security design reviews, risk assessments, and threat modelling focused on infrastructure.
• Collaboration experience with engineering teams to detect, audit, and remediate security issues within DevOps practices, including CI/CD pipelines and infrastructure as code.
• In-depth knowledge of cloud security for providers such as AWS and Google Cloud, including aspects of observability and site reliability engineering.
• Proficiency in modern programming languages; experience with Go, Python, or Java is highly desirable.
• Demonstrated success leading end-to-end security projects and mentoring security professionals.
• Strong communication skills enabling effective interaction across varied technical backgrounds and experience levels.

Desirable Competencies

• Experience designing and deploying security tools for containerized environments.
• Familiarity with infrastructure and orchestration technologies such as Terraform, Docker, Kubernetes, and CI/CD platforms like Buildkite, Jenkins, or ArgoCD.
• Understanding of best practices and platforms for secrets management in orchestrated environments.

About the Team

This role is part of the Security Group dedicated to safeguarding systems and data through preventive and detective controls within Application Security, Risk Management, Enterprise Security, and Threat Detection domains. Within Application Security, you will serve as a subject matter expert to secure the platform's foundational infrastructure through threat modelling, code review, and investigative efforts. Strong advisory relationships with platform engineering teams are key to enable secure platform services and infrastructure improvements continuously.

Benefits and Culture

• Equity opportunities, sharing in company success.
• An inclusive parental leave policy supporting all parents and caregivers.
• A annual allowance supporting wellbeing, social activities, and home office setups.
• Flexible leave arrangements that encourage recharging and personal balance.

Additional Information

Our hiring process embraces AI as an amplifier of creativity and technology. Candidates may engage in interactive challenges and use AI tools during interviews, guided by recruitment staff. We base our hiring decisions on skills, experience, and cultural fit. Applicants are encouraged to share pronouns and request accommodations as needed. Interviews are conducted virtually to facilitate convenience and accessibility.