Principal Product Security Engineer — AI‑Driven Security

Commonwealth Bank; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

Commonwealth Bank is seeking a Principal Product Security Engineer to join Group Security in Sydney. You will shape secure product delivery, embedding security into software engineering practices and driving practical risk reduction at enterprise scale.

You will lead end-to-end security engagements across Retail Banking technology portfolios, mentor engineers, and advance secure-by-design, cloud-native and DevSecOps practices through automation and AI-enabled approaches.

Qualifications

• Deep expertise in Application Security or Product Security at scale.
• Strong understanding of secure software development practices.
• Experience conducting security assessments, code reviews and testing.
• Ability to influence engineering teams and security outcomes.
• Experience with cloud-native and DevSecOps practices.

Responsibilities

• Lead application security initiatives across multiple technology domains and delivery streams.
• Partner with engineering teams to identify security risks and drive pragmatic remediation strategies.
• Perform and guide application security assessments, including source code reviews and security testing activities.
• Embed secure-by-design principles throughout the software development lifecycle.
• Influence security outcomes across complex and fast-paced engineering environments.
• Develop new approaches that leverage automation and AI to improve security effectiveness and scalability.
• Mentor engineers and security practitioners, helping uplift capability across the organisation.
• Support the continuous evolution of application security standards, practices and ways of working.
• Work closely with stakeholders to balance security, customer experience and delivery objectives.

Skills

Application Security

Product Security

Secure-by-design

Cloud-native

DevSecOps

Automation

AI in Security

Mentoring

Job description

Commonwealth Bank is seeking a Principal Product Security Engineer to join Group Security in Sydney. You will shape secure product delivery, embedding security into software engineering practices and driving practical risk reduction at enterprise scale.

You will lead end-to-end security engagements across Retail Banking technology portfolios, mentor engineers, and advance secure-by-design, cloud-native and DevSecOps practices through automation and AI-enabled approaches.