Principal Product Security Engineer - AI-Driven Leader

Commonwealth Bank Of Australia; Melbourne; In loco; AUD 190.000 - 270.000; Tempo pieno

Descrizione del lavoro

Commonwealth Bank Of Australia is seeking a Principal Product Security Engineer in Melbourne to elevate secure engineering practices across Retail Banking technology. You will lead secure-by-design initiatives, perform advanced web app security work and mentor teams to strengthen product security at scale.

You will partner with engineering leaders to embed security earlier in the development lifecycle and drive automation, AI-driven capabilities and risk-based decision making across complex

Competenze

• Extensive experience in Application Security, Product Security or Offensive Security, with a strong focus on web application security.
• Hands-on expertise in web application penetration testing, including authentication, authorization, business logic, API and cloud-native security weaknesses.
• Secure code review capabilities across modern programming languages and frameworks, identifying security vulnerabilities from source code.
• Deep understanding of modern authentication/authorization, web protocols, APIs, cloud-native architectures and common attack vectors.
• Proven experience conducting threat modelling, architecture reviews, penetration testing and security assessments across the SDLC.
• Strong understanding of secure software engineering principles, OWASP methodologies and modern security practices.
• Ability to communicate complex technical risks clearly and influence engineering teams.
• Experience with cloud platforms, CI/CD, DevSecOps and infrastructure-as-code.
• Mentoring others and promoting a strong security culture across engineering teams.
• Experience leveraging automation, scripting, AI or tooling to improve security effectiveness.

Mansioni

• Lead complex application security engagements across a diverse portfolio of products, platforms and engineering teams.
• Perform advanced web application penetration testing and security assessments to identify vulnerabilities and business risks.
• Conduct in-depth secure code reviews across modern technology stacks, identifying vulnerabilities and insecure patterns.
• Partner with engineers to embed secure-by-design principles throughout the SDLC.
• Provide expert guidance on security risks, remediation strategies and architecture decisions.
• Drive threat modelling activities and help teams identify and mitigate risks during design and development.
• Influence security outcomes across large-scale engineering environments through leadership and stakeholder engagement.
• Develop and enhance security tooling, automation and AI-driven capabilities to improve coverage and efficiency.
• Mentor engineers and security practitioners to uplift secure development capabilities.
• Contribute to evolution of product security standards and testing methodologies.
• Work with stakeholders to balance security risk with customer experience and delivery objectives.

Conoscenze

Web app security

Penetration testing

Secure code review

Security architecture

Threat modelling

DevSecOps

Automation tooling

Mentoring

Security leadership

Cloud security

Strumenti

Security tooling

Descrizione del lavoro

Commonwealth Bank Of Australia is seeking a Principal Product Security Engineer in Melbourne to elevate secure engineering practices across Retail Banking technology. You will lead secure-by-design initiatives, perform advanced web app security work and mentor teams to strengthen product security at scale.

You will partner with engineering leaders to embed security earlier in the development lifecycle and drive automation, AI-driven capabilities and risk-based decision making across complex