DevSecOps Security Consultant / Engineer - Contract - Sydney

Hastha Solutions; Sydney; On-site; AUD 120,000 - 150,000; Part time

Job summary

Hastha Solutions is seeking a DevSecOps Security Consultant/Engineer for a 3-month contract in Sydney, offering urgent paglity. The role demands deep security expertise across cloud, application, and IaC security with hands-on use of Orca Security and GitHub Advanced Security to identify vulnerabilities and enforce secure-by-design practices.

You will partner with DevOps and engineering teams to secure CI/CD pipelines, automate security tests, manage vulnerabilities, and deliver actionable

Qualifications

• 8+ years of experience in Cyber Security, Cloud Security, Application Security, or DevSecOps roles.
• Hands-on with Orca Security and GitHub Advanced Security for vulnerability discovery and remediation.
• Experience securing CI/CD pipelines and integrating security controls into development workflows.
• Familiarity with AWS, Azure, or GCP and container/Kubernetes security.

Responsibilities

• Conduct DevSecOps security discovery, assessment, and risk evaluation across clouds, apps, and environments.
• Perform security posture reviews using Orca Security and GitHub Advanced Security.
• Analyse cloud workloads, repos, and architectures to assess security risks and mitigations.
• Integrate security controls throughout the SDLC with DevOps and engineering teams.
• Enhance CI/CD pipelines with automated security testing, code scanning, and policy enforcement.
• Review findings, prioritize risks, and provide remediation guidance to stakeholders.
• Track remediation efforts across clouds, containers, and source code.
• Support vulnerability management activities and remediation verification.
• Contribute to DevSecOps standards, baselines, and governance frameworks.
• Collaborate on security monitoring and compliance readiness.
• Prepare assessment reports and executive security recommendations.

Skills

Orca Security

GitHub Advanced Security

CI/CD Security

Cloud Security

Vulnerability Mgmt

IaC Security

Kubernetes Security

Security Automation

Stakeholder Mgmt

Education

Bachelor's degree in Computer Science/IT

Tools

Orca Security

GitHub Advanced Security

Terraform

CloudFormation

Job description

DevSecOps Security Consultant / Engineer - Contract - Sydney

Sydney, Australia | Posted on 09/11/2026

Urgentrequirement of DevSecOps Security Consultant / Engineer - Contract - Sydney

Requirements

Experience:

• 8+ relevant experience in Cyber Security, Cloud Security, Application Security, or DevSecOps engineering roles.

Key Responsibilities:

• Conduct comprehensive DevSecOps security discovery, assessment, and risk evaluation activities across cloud platforms, applications, and development environments.
• Perform security posture reviews using Orca Security and GitHub Advanced Security to identify vulnerabilities, misconfigurations, exposed assets, code security issues, and compliance gaps.
• Analyse cloud workloads, repositories, infrastructure configurations, and application architectures to assess security risks and recommend mitigation strategies.
• Partner with DevOps, engineering, and application teams to integrate security controls and secure-by-design principles throughout the software development lifecycle (SDLC).
• Implement and enhance security capabilities within CI/CD pipelines, including automated security testing, code scanning, secret detection, dependency analysis, and policy enforcement.
• Review and validate security findings, prioritize risks based on business impact, and provide actionable remediation guidance to stakeholders.
• Track remediation efforts and security improvements across cloud environments, containerised workloads, and source code repositories.
• Support vulnerability management activities, including identification, reporting, risk assessment, and remediation verification.
• Contribute to the development of DevSecOps standards, security baselines, governance frameworks, and operational procedures.
• Collaborate with cross‑functional teams to improve cloud security architecture, compliance readiness, and security monitoring capabilities.
• Prepare assessment reports, security dashboards, executive summaries, and technical recommendations for management and project teams.

Required Skills and Experience:

• Strong hands‑on experience with Orca Security and GitHub Advanced Security.
• Practical knowledge of DevSecOps methodologies, security automation, and secure software development practices.
• Experience securing CI/CD platforms and integrating security controls into development pipelines.
• Strong understanding of cloud security concepts, including identity and access management, network security, data protection, and workload security.
• Experience with vulnerability management, risk assessment, and remediation tracking.
• Knowledge of application security principles, code security testing, and software supply chain security.
• Familiarity with cloud platforms such as AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Understanding of container security, Kubernetes security, and Infrastructure as Code (IaC) security practices.
• Strong analytical, troubleshooting, and problem‑solving skills.
• Excellent communication and stakeholder management capabilities.

Preferred Qualifications:

• Relevant cloud security or cybersecurity certifications.
• Experience working in enterprise‑scale DevSecOps and cloud transformation programs.
• Knowledge of regulatory compliance frameworks and industry security standards.

Education:

• Bachelor’s degree in computer science, Information Security, Information Technology, Engineering, or a related field.

Duration: 03 Monthsandpossible extension

Eligibility: Australian/NZCitizens/PR Holders only