Hands-on Security Engineer: AppSec & Cloud (DevSecOps)

CH Solutions; Melbourne; Hybrid; AUD 120,000 - 160,000; Full time

Job summary

CH Solutions in Melbourne is seeking an experienced security engineer to remediate vulnerabilities, embed security into CI/CD, and secure AWS cloud environments. You’ll work with a Security Analyst and Compliance Analyst, reporting to the CISO, delivering practical security improvements across multiple domains.

You’ll perform threat assessments, support ISO 27001, audits and penetration testing, and partner with delivery teams to provide pragmatic security guidance. Hybrid working is offered.

Qualifications

• Hands-on security engineering experience fixing vulnerabilities including OWASP Top 10.
• Comfort working with application code and able to identify and fix issues.
• Solid understanding of OWASP Top 10 and secure coding practices.
• Cloud security experience with AWS preferred.
• Scripting or automation skills (e.g., Python, PowerShell, Bash).
• Experience with CI/CD, Infrastructure as Code and DevSecOps practices.
• Exposure to SIEM, SOC/MSSP collaboration and incident response.
• Clear communication with technical and non-technical stakeholders.

Responsibilities

• Remediate vulnerabilities hands-on, including OWASP Top 10, collaborating with application teams.
• Embed security into CI/CD pipelines and Infrastructure as Code.
• Secure the cloud environment, primarily AWS.
• Collaborate with external SOC to investigate, prioritise and respond to alerts.
• Design, implement and improve controls across identity, endpoint, network, application and data security.
• Automate repeatable security tasks to reduce manual effort.
• Run security reviews, threat assessments and control testing for new solutions and changes.
• Support ISO 27001, audit and penetration testing activities.
• Provide practical, pragmatic security advice to delivery teams.

Skills

Security engineering

OWASP Top 10

AWS Cloud

Automation scripting

CI/CD

DevSecOps

SOC/SIEM experience

Stakeholder communication

Job description

CH Solutions in Melbourne is seeking an experienced security engineer to remediate vulnerabilities, embed security into CI/CD, and secure AWS cloud environments. You’ll work with a Security Analyst and Compliance Analyst, reporting to the CISO, delivering practical security improvements across multiple domains.

You’ll perform threat assessments, support ISO 27001, audits and penetration testing, and partner with delivery teams to provide pragmatic security guidance. Hybrid working is offered.