Jobs → Engineering → Principal Security Engineer

About the Role We are looking for an experienced Principal Security Engineer (Generalist) to provide technical leadership across enterprise cybersecurity, security architecture, risk management, and governance. Key Responsibilities • Lead enterprise security architecture and secure-by-design solutions • Define and govern multi-cloud security strategies across AWS and GCP • Drive Zero Trust architecture, security patterns, and technical blueprints • Conduct security-based risk assessments and threat modelling • Implement DevSecOps practices and security automation across CI/CD pipelines • Establish security controls, risk mitigation strategies, and exception management • Ensure compliance with APRA CPS 234, CPS 230, NIST CSF, and ISO 27001 • Lead IAM, SSO, PAM, and identity lifecycle management initiatives • Provide technical guidance and mentorship to engineering teams Requirements • 15+ years of cybersecurity and security engineering experience • Strong expertise in Cloud Security (AWS / GCP) • Experience in Application Security, IAM, Network Security, and GRC • Knowledge of Terraform, Ansible, Docker, and Kubernetes • Strong understanding of DevSecOps, SAST, DAST, SCA, and CI/CD security • Experience with Microsoft Entra ID, Okta, SAML, and OAuth 2.0 • Strong experience in security risk assessments and risk-based control design • Knowledge of APRA CPS 234, CPS 230, NIST CSF, ISO 27001, and Essential Eight • Banking and Financial Services experience will be highly regarded