Cloud Security and DevSecOps Engineer

IPH Limited; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid working

Paid parental leave

Leave purchase scheme

Group Salary Continuance Insurance

Wellbeing Hub

Structured professional development

Fresh fruit daily

Collaborative culture

Job summary

IPH Limited is hiring a Cloud Security and DevSecOps Engineer to join our Sydney team on a full-time basis. You will design, implement and maintain security controls across Azure and AWS, embedding SAST, DAST and SCA into the SDLC and CI/CD pipelines.

Collaborate with infrastructure, cloud, architecture, development and security teams to ensure security by design and secure, resilient business outcomes. Hybrid working is standard.

Qualifications

• 5+ years in Cyber Security, Cloud Security or related fields.
• Hands-on with Microsoft Azure and AWS environments.
• Strong understanding of cloud security architecture and best practices.
• Experience operating SAST, DAST and SCA tools and integrating security testing within CI/CD pipelines.
• Knowledge of IAM, Zero Trust and Privileged Access Management concepts.
• Experience with scripting or automation (PowerShell, Python, Bash).

Responsibilities

• Design, implement and maintain cloud security controls across Azure and AWS environments.
• Monitor cloud security posture and remediation activities.
• Develop and maintain cloud security standards and architecture patterns.
• Conduct cloud security reviews and risk assessments for new projects and services.
• Embed security testing into CI/CD pipelines and manage SCA, SAST and DAST tools.
• Promote DevSecOps culture and Secure by Design principles.

Skills

Azure

AWS

Cloud Security

CI/CD security

SAST/DAST/SCA

IAM/Zero Trust

Scripting

Stakeholder comms

Job description

About The Role

IPH Limited is seeking a Cloud Security and DevSecOps Engineer to join our Sydney team on a full-time basis. You will be responsible for designing, implementing and maintaining security controls across the organisation’s cloud environments and software development lifecycle.

The role will focus primarily on securing Azure and AWS platforms, while embedding application security practices through the effective management and operation of SAST, DAST and Software Composition Analysis (SCA) tools and associated governance processes.

Working closely with infrastructure, cloud, architecture, development and security teams, you will ensure security is integrated into cloud services and applications by design, enabling secure and resilient business outcomes.

Key Responsibilities

• Design, implement and maintain cloud security controls across Azure and AWS environments.
• Monitor cloud security posture and recommend remediation activities to address security risks and compliance gaps.
• Develop and maintain cloud security standards, baselines and architecture patterns.
• Conduct cloud security reviews and risk assessments for new projects and services.
• Implement security monitoring, logging and alerting capabilities.
• Establish and mature application security practices across the SDLC.
• Manage and optimise SCA, SAST and DAST tools and embed security testing into CI/CD pipelines.
• Review and triage application security vulnerabilities and support development teams with remediation activities.
• Support threat modelling and security reviews and provide security advice throughout solution design, development, testing and deployment.
• Promote DevSecOps culture and Secure by Design principles across technology teams.
• Provide security input into architecture reviews, technology initiatives, audits and security policies.

About You

• 5+ years’ experience in Cyber Security, Cloud Security, Application Security or related disciplines.
• Hands-on experience securing Microsoft Azure and AWS environments.
• Strong understanding of cloud security architecture and best practices.
• Experience operating SAST, DAST and SCA tools and integrating security testing within CI/CD pipelines.
• Understanding of OWASP Top 10, OWASP ASVS and secure coding principles.
• Experience with vulnerability management and remediation processes.
• Knowledge of IAM, Zero Trust and Privileged Access Management concepts.
• Experience with scripting or automation using PowerShell, Python, Bash or similar.
• Strong stakeholder engagement and communication skills.
• Relevant certifications such as Azure Security Engineer Associate, AWS Certified Security Specialty, CISSP or Certified DevSecOps Professional are preferred.

About Us

IPH Limited is the holding company for intellectual property (“IP”) and associated companies offering a wide range of IP services and products. IPH companies employ a highly skilled multidisciplinary team of approximately 1600 people in Australia, New Zealand, Canada, Singapore, Malaysia, China, Indonesia, Thailand, Philippines and Hong Kong. IPH companies service a diverse client base of Fortune Global 500 companies, multinationals, public sector research organisations, SMEs and professional services firms worldwide.

The IPH Group is committed to promoting and maintaining a workplace culture of shared respect to enable us all to feel valued and be the best we can be. We encourage applications from Aboriginal and Torres Strait Islander people and individuals from diverse backgrounds. We remain committed to providing reasonable and fair adjustments to provide a positive, barrier free, transparent recruitment process and supportive workplace.

What We Offer

We’re proud to offer a range of benefits that support your wellbeing, growth, and work–life balance, including:

• Paid parental leave of up to 18 weeks, and up to 6 weeks paid Secondary Caregiver leave
• Leave purchase scheme (up to 2 weeks)
• 1 day paid IP Day
• Group Salary Continuance Insurance
• Access to our Wellbeing Hub
• Hybrid working as standard
• Structured professional development programmes
• Fresh fruit delivered daily and monthly morning tea
• A collaborative, inclusive and supportive culture

Successful candidates will undergo a standard pre-employment screening as part of the hiring process within the IPH Group. This process may include verifying key information such as your identity, qualifications, references, and criminal history. By submitting your application, you acknowledge that you may be required to complete any necessary background checks relevant to the role. Please note, only shortlisted applicants will be contacted directly.