Principal Platform & Cloud Security Engineer

UBank; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

UBank is seeking a Principal Security Engineer to design and implement platform and cloud security controls across its cloud-native environments. You will own security engineering strategy for Kubernetes, CI/CD pipelines, cloud IAM, and runtime protection, writing production code daily to make secure defaults the normal path.

You will collaborate with cross-functional teams to embed security into developer workflows, build reusable libraries and tooling, and drive security standards across the

Qualifications

• 10+ years in software or security engineering with platform/security focus.
• Experience designing security controls for Kubernetes-based platforms (admission controllers, pod security, network policy).
• Shipping reusable security libraries or automation adopted by product teams.
• Securing CI/CD pipelines and container supply chains (image provenance, vulnerability scanning).
• Experience in regulated financial services or critical infrastructure is desirable.

Responsibilities

• Design and build platform-level security controls across Kubernetes and cloud environments.
• Define cloud IAM patterns and multi-account security baselines.
• Develop security automation and tooling, including runtime detection and security-as-code patterns.
• Lead threat modelling sessions and publish reusable security runbooks and patterns.
• Define and uphold security standards for deployment pipelines and cloud provisioning.

Skills

Kubernetes security

Cloud security

CI/CD security

Admission controllers

Workload identity

Image provenance

eBPF tooling

Security libraries

Automation pipelines

Threat modelling

Tools

OPA/Gatekeeper

Kyverno

Sigstore

Cosign

Falco

Job description

UBank is seeking a Principal Security Engineer to design and implement platform and cloud security controls across its cloud-native environments. You will own security engineering strategy for Kubernetes, CI/CD pipelines, cloud IAM, and runtime protection, writing production code daily to make secure defaults the normal path.

You will collaborate with cross-functional teams to embed security into developer workflows, build reusable libraries and tooling, and drive security standards across the