Lead Product Security Engineer – AI-Driven Secure-by-Design

Commonwealth Bank; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Commonwealth Bank in Sydney is seeking a Principal Product Security Engineer to embed secure-by-design practices across Retail Banking technology, driving enterprise-scale security outcomes and enabling fast, secure product delivery.

You will mentor engineers, lead assessments, and collaborate with cloud-native DevSecOps teams to advance AI- and automation-enabled security, shaping the future of product security across the organisation.

Qualifications

• End-to-end application security engagements across large organisations.
• Deep understanding of secure software development practices and vulnerabilities.
• Experience conducting security assessments and source code reviews.
• Ability to influence engineering teams and security outcomes at scale.

Responsibilities

• Lead application security initiatives across multiple technology domains and delivery streams.
• Partner with engineering teams to identify security risks and drive remediation strategies.
• Perform and guide application security assessments and testing activities.
• Embed secure-by-design principles throughout the software development lifecycle.
• Influence security outcomes across complex engineering environments.
• Develop approaches leveraging automation and AI to improve security effectiveness.
• Mentor engineers and security practitioners to uplift capability.
• Support evolution of application security standards and ways of working.
• Balance security with customer experience and delivery objectives.

Skills

Application Security

Product Security

Security assessments

Source code reviews

DevSecOps

Cloud-native

Automation & AI

Mentoring

Job description

Commonwealth Bank in Sydney is seeking a Principal Product Security Engineer to embed secure-by-design practices across Retail Banking technology, driving enterprise-scale security outcomes and enabling fast, secure product delivery.

You will mentor engineers, lead assessments, and collaborate with cloud-native DevSecOps teams to advance AI- and automation-enabled security, shaping the future of product security across the organisation.