Principal Engineer - Security Strategy, Enablement & Engineering (SEE)

Bendigobank; Brisbane; Hybrid; AUD 220,000 - 320,000; Full time

Benefits offered by this job

Hybrid work options

Private health insurance

Gym membership discounts

Learning & development programs

Employee Assistance Program

Job summary

Bendigo Bank is seeking a Principal Engineer for Security Strategy, Enablement & Engineering to bridge cyber strategy with fast-paced software delivery. You will champion Security-as-Code, govern modern security patterns, and mentor teams across the enterprise.

Lead hands-on guardrails for GenAI, quantum-safe crypto, and container security, while standardising pipelines (SAST/DAST/SCA) across AWS, GCP, and Azure. A developer-first security culture is central to the role.

Qualifications

• Proven leadership as Principal Engineer or Lead Security Architect in a regulated enterprise.
• Hands-on IaC with Terraform/CloudFormation and CI/CD pipelines across multi-cloud.
• Strong security engineering experience: container security, cloud-native security, threat modelling.
• Knowledge of Zero Trust, identity federation, and API security.
• Ability to influence stakeholders with a developer-enabling mindset.

Responsibilities

• Define enterprise security patterns and guardrails across the organization.
• Lead explorations of GenAI governance and quantum-safe security concepts.
• Standardise CI/CD guardrails (SAST, DAST, SCA) across multiple cloud environments.
• Mentor squads and foster a security-enabled engineering culture.

Skills

Leadership

Terraform

CI/CD

Kubernetes

Zero Trust

Threat Modelling

Identity Federation

API Security

Stakeholder Influence

Developer Empathy

Tools

Terraform

CloudFormation

GitHub Actions

GitLab CI/CD

Kubernetes

Docker

CSPM/CWPP

Job description

Are you ready to shape the future of cyber security engineering across one of Australia’s most trusted banking institutions? As our Principal Engineer for Security Strategy, Enablement & Engineering (SEE), you will stand as our foremost technical authority, bridging visionary cyber strategy with modern, high-velocity software and platform delivery. Operating at the cutting-edge intersection of cloud-native architecture, DevSecOps, and emerging tech, you will champion a developer-first, "Security-as-Code" mindset that empowers engineering squads to ship secure, resilient code at pace.

In this pivotal role, you will act as a trusted technical advisor to the Head of SEE and guide cross-functional squads across the enterprise. You will lead the charge in defining enterprise-wide security patterns, modernising our Security Front Door, and pioneering exploratory guardrails for next-generation frontiers such as Generative AI governance and quantum-safe cryptography- ensuring our digital platforms remain resilient, compliant, and secure by design.

In this role you’ll get to…

• Lead Technical Security Direction: Serve as the chief technical authority across the SEE practice, turning strategic cyber goals into scalable, high-impact engineering backlogs and reference architectures.
• Pioneer Emerging Tech & AI Controls: Lead hands-on exploration and practical prototyping of guardrails for cutting-edge technologies, including GenAI enablement and quantum-safe cryptography.
• Embed Frictionless DevSecOps: Champion "Security-as-Code" across digital delivery pipelines, standardising automated CI/CD guardrails (SAST, DAST, SCA, container scanning) across multi-cloud environments.
• Modernise Enterprise Security Patterns: Build, curate, and maintain a reusable catalogue of modern security blueprints, standards, and automated policy enforcement guardrails.
• Transform the Security Front Door: Establish automated security triggers and technical criteria to reduce friction for project engagements and accelerate time-to-market.
• Inspire & Mentor Squads: Foster a security-enabling engineering culture grounded in developer empathy, coaching senior engineers and technical champions across the bank.

What you’ll bring to the role

To be successful in the role you will have:

• Proven leadership experience as a Principal Engineer, Lead Security Architect, or Lead DevSecOps Engineer within a complex, highly regulated enterprise environment.
• Deep hands-on expertise with Infrastructure-as-Code (Terraform, CloudFormation) and modern CI/CD automation pipelines (GitHub Actions, GitLab CI/CD) across multi-cloud environments (AWS, GCP, Azure).
• Extensive practical mastery of container and cloud-native security (Kubernetes, Docker, microservices, CSPM/CWPP tooling).
• A solid foundation in authoring enterprise security standards, threat modelling, Zero Trust architecture, identity federation, and API security.
• Practical understanding of modern and emerging tech controls, including the OWASP Top 10 for LLMs, AI inference security, and post-quantum cryptographic concepts.
• Exceptional stakeholder influence with a genuine "enabler" mindset—committed to developer empathy, eliminating friction, and articulating complex security concepts across all levels.

So, why work with us?

• Want big impact that matters? Here, you’ll know your work directly benefits the customers and communities we all serve.
• Want to be more than just a number? Join a team that truly values you – and that gets more and more diverse every day.
• Want career opportunity AND flexibility? Achieve both here, where we know that balance and progression go hand in hand.

You’ll also get access to a great range of benefits, including:

• Hybrid work? Flexible hours? A compressed work week? Our flexible work options are designed to suit your life. We offer flexible work options that put our people first, working in a hybrid model with a minimum local Head Office attendance requirement determined by your Leader, to find a rhythm that works best for you and your team. We believe that coming into the office some of the time is the best way to learn, stay connected and collaborate effectively, especially for key activities like team days, 1:1s, and town halls.
• Health and well-being support, including discounted gym memberships, private health insurance options, and our Employee Assistance Program (EAP) for you and your immediate family members.
• Take your learning to the next level through opportunities like our corporate university ‘BEN U’ or at an external provider of your choice.

We believe a diverse workforce supported by an inclusive culture is central to our success and we actively encourage applications from those who bring diversity of thought to our business. We support candidate requests for adjustment to accommodate an illness, injury, or disability to equitably participate in the selection process.