DevSecOps Engineer

Change Recruitment; City of Brisbane; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

Change Recruitment is seeking a senior DevOps/Cloud Security Engineer to maintain and secure cloud infrastructure across AWS and/or GCP, with strong Kubernetes (EKS), Docker and Terraform hands-on expertise in a hybrid Brisbane setup.

You will design and implement security controls, monitor events, run vulnerability assessments, automate security within CI/CD, and mentor engineers while helping shape the cloud security strategy and ensuring compliance with security standards.

Qualifications

• 5+ years' experience in DevOps, Platform Engineering or Cloud Engineering.
• Commercial experience building and securing cloud infrastructure.
• Experience with security tooling such as SIEM, IDS/IPS, vulnerability management, endpoint security or log management platforms.
• Strong Kubernetes (EKS), Docker and Terraform experience.
• Experience with Python or another scripting language for automation.
• Solid CI/CD experience and a security-first approach to software delivery.
• Understanding of security frameworks such as NIST, ISO 27001, Essential Eight or similar compliance standards.
• Strong communication skills and the ability to work closely with both technical and non-technical stakeholders.

Responsibilities

• Maintain and secure cloud infrastructure, ensuring environments remain compliant with security standards and operational SLAs.
• Monitor security events, logs and alerts, investigating potential threats and responding to incidents proactively.
• Deliver security-focused infrastructure initiatives that reduce risk while supporting business objectives.
• Design, implement and maintain security controls across cloud infrastructure, networks and applications.
• Perform vulnerability assessments and support penetration testing activities.
• Embed security throughout the software development lifecycle, partnering closely with engineering teams to promote secure development practices.
• Drive automation across security and operational processes to reduce manual effort and improve efficiency.
• Contribute to Business Continuity and Disaster Recovery planning, ensuring resilient cloud platforms.
• Mentor engineers and promote security best practices across the wider technology team.

Tools

AWS

GCP

Kubernetes (EKS)

Docker

Terraform

Python scripting

CI/CD

NIST/ISO27001/Essential Eight

Job description

Location: Brisbane (Hybrid) | Permanent | Must have PR OR Citizenship

What You'll Be Doing

• Maintain and secure cloud infrastructure, ensuring environments remain compliant with security standards and operational SLAs.
• Monitor security events, logs and alerts, investigating potential threats and responding to incidents proactively.
• Deliver security-focused infrastructure initiatives that reduce risk while supporting business objectives.
• Design, implement and maintain security controls across cloud infrastructure, networks and applications.
• Perform vulnerability assessments and support penetration testing activities.
• Embed security throughout the software development lifecycle, partnering closely with engineering teams to promote secure development practices.
• Drive automation across security and operational processes to reduce manual effort and improve efficiency.
• Contribute to Business Continuity and Disaster Recovery planning, ensuring resilient cloud platforms.
• Mentor engineers and promote security best practices across the wider technology team.

What We're Looking For

• 5+ years' experience in DevOps, Platform Engineering or Cloud Engineering with strong exposure to AWS and/or GCP.
• Commercial experience building and securing cloud infrastructure.
• Experience with security tooling such as SIEM, IDS/IPS, vulnerability management, endpoint security or log management platforms.
• Strong Kubernetes (EKS), Docker and Terraform experience.
• Experience with Python or another scripting language for automation.
• Solid CI/CD experience and a security-first approach to software delivery.
• Understanding of security frameworks such as NIST, ISO 27001, Essential Eight or similar compliance standards.
• Strong communication skills and the ability to work closely with both technical and non-technical stakeholders.

Nice to Have

• Industry certifications such as CISSP, CCSP, AWS Security Specialty, AWS Solutions Architect Professional, Security+, or equivalent cloud security certifications.
• Experience supporting enterprise SaaS environments and identity/security platforms.
• Exposure to AI-assisted development tools or security automation.

Why Apply?

• Work on modern cloud infrastructure using AWS and Kubernetes.
• Join a collaborative engineering team where security is treated as an engineering function rather than an afterthought.
• Opportunity to influence cloud security strategy while remaining hands-on technically.
• Flexible hybrid working and genuine career development opportunities.