Information Security Engineer III

InComm Payments; City of Melbourne; On-site; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Employee Referral Bonus Program

Job summary

InComm Payments is seeking an Information Security Engineer III in Melbourne to secure applications by integrating security tools into CI/CD pipelines and leading incident response. You will work with Azure, AWS, and OCI, perform threat modeling, and ensure compliance with OWASP and industry standards.

The role requires 5+ years in application security, strong scripting, and hands-on SAST/DAST expertise across multi-cloud environments.

Qualifications

• 5+ years of application security experience.
• CI/CD tooling such as Jenkins, GitHub Actions, Azure Pipelines.
• Scripting with PowerShell or Python.
• Experience with SAST & DAST tools and OWASP methodologies.
• Web/app security in cloud environments (Azure, AWS, OCI).

Responsibilities

• Integrate SAST tooling into CI/CD pipelines.
• Provide tailored SAST integration support for dev teams.
• Analyze application logs and communicate findings to leadership.
• Participate in on-call rotation for WAF incidents.
• Validate vulnerabilities and tune configurations to reduce false positives.
• Develop threat models with development teams.
• Assess security configurations in Azure, AWS, and OCI.
• Assist in incident response and remediation actions.
• Participate in design and architectural reviews.
• Coordinate with third parties for vulnerability testing.

Skills

CI/CD tooling

Scripting

SAST/DAST

OWASP

Penetration testing

Cloud security

WAF

IAM security

Collaboration

Multi-cloud

Tools

Jenkins

GitHub Actions

Azure Pipelines

Docker

Kubernetes

PowerShell

Python

Job description

Overview

When you think of InComm Payments, think of Innovative Payments Technology. We were founded over 30 years ago and continue to be a pioneer in the payment (FinTech) industry. Since our inception, we have grown to be a team of over 3,000 employees in 35 countries around the world. We own over 400 global technical patents and a network that includes over 525,000 points of retail distribution that points to our industry expertise. InComm Payments works with the most recognized and valued brands in the world, and we are partnered with most of the world’s leading merchants. InComm Payments is highly focused on our people and their growth, and we work hard to make a career at InComm Payments meaningful and rewarding. We value innovation, quality, passion, integrity, and responsibility in all that we do, and we are looking for great people to join our team as we move forward towards a very bright future. You can learn more about InComm Payments by visiting our Website or connecting with us on LinkedIn, YouTube, Twitter, Facebook, or Instagram.

About This Opportunity

As an Information Security Engineer III, you will work on securing applications across InComm Payments by integrating security tools into CI/CD pipelines, conducting threat modeling, and supporting incident response. Ideally, you will have 5+ years of application security experience, strong scripting and cloud security skills (Azure, AWS, OCI), and hands-on knowledge of SAST/DAST tools, WAFs, and penetration testing. The role also involves collaborating with development teams, leading security initiatives, and ensuring compliance with industry standards.

Responsibilities

• Integrate SAST tooling into CI/CD pipelines, ensuring compatibility and efficient scanning within development workflows.
• Provide tailored SAST integration support for development teams at varying maturity levels with diverse toolsets and security requirements.
• Analyze application logs for anomalous patterns, communicate findings to leadership, and persuade them to take appropriate action.
• Participate in on-call rotation in support of WAF incidents.
• Validate security vulnerabilities identified by automated tools and fine-tune configurations to minimize false positives and reduce noise.
• Develop threat models with development teams to help expose risks in their deliverables.
• Conduct regular assessments of security configurations and controls within Azure, AWS, and OCI environments.
• Incident Response: Assist in investigating security incidents with CSOC and implementing corrective actions.
• Participate in application design and architectural reviews.
• Facilitate activities such as blue/red team events and bug bounty programs.
• Lead prioritization discussions to gain traction on important security issues
• Act as a liaison with 3rd parties performing vulnerability scans and penetration testing to validate findings and inform priorities and strategies for remediation.
• Draft, evaluate, and monitor compliance with application and development security standards.
• Ensure development teams are validating for OWASP Top 10 and performing industry leading application security practices.

Qualifications

• 5+ years of application security experience.
• Strong background with CI/CD processes and associated tooling, such as Jenkins, GitHub Actions, Azure Pipelines, or similar.
• Strong scripting experience - PowerShell, Python, etc.
• Extensive experience with SAST & DAST application scanning tools and knowledge of OWASP methodologies
• Application security experience with high level programming languages (e.g., Java, C, C++, C#, VB, .NET, ASP.NET, ASP, PHP, J2EE, JSP)
• Experience with Container technologies - Docker, Docker Swarm, Kubernetes
• Experience in cloud security, specifically with Azure, AWS, and OCI, preferably in the Fintech or related sectors and multi-cloud environments.
• Knowledge of Web Application Firewalls (WAF)
• Experience with Identity and Access Management security solutions and protocols (e.g., SAML, OpenID, and OAuth)
• Experience with performing web, API, and mobile manual penetration testing; preparing reports to document findings; and presenting the report to development teams.
• Familiarity with regulatory controls and industry best practices such as HIPAA, PCI, HiTrust, NIST etc.
• Conduct regular assessments of security configurations and controls within Azure, AWS, and OCI environments.
• Incident Response: Assist in investigating security incidents and implementing corrective actions.
• Communication skills to create documentation, videos and conduct training classes
• Ability to manage multiple tasks simultaneously and meet established deadlines.
• Ability to collaborate with IT teams on security-related tasks and projects.
• Ability to work productively while remote and communicate effectively in a virtual team environment.
• Ability to stay current with new technology.

InComm Payments provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, sexual orientation, gender identity or national origin, citizenship, veteran's status, age, disability status, genetics or any other category protected by federal, state, or local law.

• This position is eligible for the Employee Referral Bonus Program