Hybrid Principal Security Engineer - DevSecOps & Cloud

Bluefin Resources Pty; Sydney; Hybrid; AUD 159,000 - 266,000; Full time

Job summary

Bluefin Resources Pty is seeking a Principal Security Engineer for a 6-month contract with hybrid work (50% in office). You will lead DevSecOps initiatives, embed security into CI/CD, and accelerate secure deployment across cloud environments.

Strong Microsoft security stack expertise and fintech experience are highly valued. The role focuses on turning security controls into code, building automation, and mentoring the team while aligning with broader security standards and future AI-enabled

Qualifications

• Deep experience in security engineering at principal, lead or senior level.
• Strong hands-on DevSecOps capability, including security automation, infrastructure as code and configuration as code.
• Advanced experience with the Microsoft security stack, including identity and access controls, detection engineering and Microsoft Sentinel.
• Experience embedding security into engineering workflows and modern CI/CD pipelines.
• Strong cloud security knowledge; AWS experience is advantageous.
• Track record of working in fintech, digital venture, scale-up or similarly agile environments.
• Ability to balance strategic leadership with practical delivery in a small team.
• Excellent stakeholder engagement and communication skills.

Responsibilities

• Drive the security engineering roadmap with a focus on DevSecOps and automation.
• Convert security controls to configuration as code and secure CI/CD pipelines.
• Lead vulnerability reduction initiatives across the venture portfolio.
• Provide hands-on security engineering across Microsoft security technologies and cloud environments.
• Partner with venture teams on new products and customer initiatives, guiding from design to delivery.
• Mentor team members and act as escalation point for complex security challenges.
• Contribute to AI-enabled product initiatives where experience aligns.

Skills

DevSecOps

Security automation

Infrastructure as code

Configuration as code

Microsoft Sentinel

Microsoft security stack

Cloud security

AWS experience

Fintech domain experience

Stakeholder engagement

Job description

Bluefin Resources Pty is seeking a Principal Security Engineer for a 6-month contract with hybrid work (50% in office). You will lead DevSecOps initiatives, embed security into CI/CD, and accelerate secure deployment across cloud environments.

Strong Microsoft security stack expertise and fintech experience are highly valued. The role focuses on turning security controls into code, building automation, and mentoring the team while aligning with broader security standards and future AI-enabled