Principal Product Security Engineer

CommBank; Sydney; In loco; AUD 180.000 - 260.000; Tempo pieno

Descrizione del lavoro

CommBank is seeking a Principal Product Security Engineer to join Group Security and embed security across software engineering practices at enterprise scale. You will lead application security initiatives across multiple domains, partner with engineering teams to identify risks and remediation strategies, and drive pragmatic security improvements.

This role focuses on transforming security across Retail Banking tech, leveraging automation and AI, while uplifting capability and ensuring

Competenze

• Deep expertise in Application Security or Product Security across large organisations.
• Strong knowledge of secure software development and common vulnerabilities.
• Experience conducting security assessments, code reviews and testing.
• Ability to influence engineering teams and security outcomes.
• Experience with cloud-native and DevSecOps practices.
• Excellent communication with both technical and non-technical stakeholders.
• Mentoring others and building security capability at scale.

Mansioni

• Lead application security initiatives across multiple technology domains and delivery streams.
• Partner with engineering teams to identify security risks and remediation strategies.
• Perform and guide security assessments, including source code reviews and security testing.
• Embed secure-by-design principles throughout the software development lifecycle.
• Influence security outcomes across complex and fast-paced engineering environments.
• Develop automation and AI approaches to improve security effectiveness and scalability.
• Mentor engineers and security practitioners, uplifting capability across the organisation.
• Support evolution of application security standards, practices and ways of working.
• Work closely with stakeholders to balance security, customer experience and delivery objectives.

Conoscenze

Application Security

Product Security

Security Assessments

Source Code Review

DevSecOps

Automation

AI in security

Descrizione del lavoro

Influence security outcomes across Retail Banking technology at enterprise scale

Drive innovation through AI, automation and secure-by-design engineering practices

Mentor engineers and uplift application security capability across multiple technology domains

Do work that matters:

At CommBank, we're building tomorrow's bank today. Technology is at the heart of everything we do and security is fundamental to providing safe, secure and trusted experiences for millions of customers.

We are seeking a Principal Product Security Engineer to join Group Security. This is a highly influential role focused on improving how security is embedded across our software engineering practices, helping teams build secure products at speed while continuously uplifting security capability across the organisation.

You'll work across a broad range of Retail Banking portfolios, partnering with engineering teams, technology leaders and security specialists to drive practical security outcomes. This is an opportunity to shape the future direction of application security through innovation, automation and modern engineering practices.

See yourself in our team:

Group Security safeguards a brighter future for all by securing the bank, protecting our customers and enabling technology teams to deliver safely at speed. We partner across the organisation to embed security earlier in the development lifecycle and help teams build secure, resilient and trusted experiences for millions of customers.

As part of our Product Security capability, you will play a key role in strengthening secure engineering practices, reducing risk and driving the evolution of product security across Retail Banking technology portfolios.

On any given day, you will:

Lead application security initiatives across multiple technology domains and delivery streams

Partner with engineering teams to identify security risks and drive pragmatic remediation strategies

Perform and guide application security assessments, including source code reviews and security testing activities

Embed secure-by-design principles throughout the software development lifecycle

Influence security outcomes across complex and fast-paced engineering environments

Develop new approaches that leverage automation and AI to improve security effectiveness and scalability

Mentor engineers and security practitioners, helping uplift capability across the organisation

Support the continuous evolution of application security standards, practices and ways of working

Work closely with stakeholders to balance security, customer experience and delivery objectives

We are interested in hearing from people who have:

Deep expertise in Application Security or Product Security, leading end-to-end security engagements and influencing secure design, engineering and delivery outcomes at scale.

Deep understanding of secure software development practices and common application security vulnerabilities

Experience conducting security assessments, source code reviews and application security testing activities

Demonstrated ability to influence engineering teams and security outcomes within large and complex organisations

Experience working within modern software engineering environments, including cloud-native and DevSecOps practices

Strong technical problem-solving skills combined with an ability to communicate effectively with both technical and non-technical stakeholders

A passion for mentoring others and building security capability at scale

An interest in emerging technologies and the practical application of AI and automation within security.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 ***.