Principal Security Engineer

XPT Software; Sydney; On-site; AUD 180,000 - 280,000; Full time

Benefits offered by this job

Certification sponsorship

Career growth opportunities

Job summary

XPT Software is seeking a Principal Security Engineer to own cloud and application security across our client environments. You will drive security architecture, governance, and risk management while leading security initiatives and collaborating with cross-functional teams.

Ideal candidates bring hands-on security engineering experience, expertise in AWS/GCP, IAM, DevSecOps, and regulatory compliance knowledge (APRA CPS 234/230, ISO 27001, NIST CSF).

Qualifications

• Broad cybersecurity experience across hands-on security engineering, architecture and governance.
• Strong experience in AWS and/or GCP Cloud Security.
• Ability to lead security architecture initiatives and risk assessments.
• Excellent stakeholder management and consulting skills.

Skills

AWS/GCP Cloud Security

Security Architecture

Zero Trust & Threat Modelling

AppSec & DevSecOps

IAM (SSO, OAuth 2.0, SAML, PAM)

Security Automation & CI/CD (SAST, DST

Infrastructure as Code (Terraform, Ans

Security Risk & Governance

Regulatory Compliance (APRA CPS 234/IS

Stakeholder Mgmt & Leadership

Job description

• XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
• XPT works with top clients across Australia in Banking, Insurance, Telecom, Retail, Energy, Mining and Manufacturing domains
• We have 120+ technocrats in Australia working at our client locations
• XPT SoftwareAustralia is part of group companies which has global presence across India & Europe
• We have served 100+ clients globally, fulfilling their onsite-offshore needs

We are looking for an experienced Principal Security Engineer with strong expertise across Cloud Security, Application Security, IAM, DevSecOps, Security Architecture and Governance, Risk & Compliance (GRC).

Key Skills Required:

Strong experience in AWS and/or GCP Cloud Security.

Security Architecture, Zero Trust and Threat Modelling.

Application Security (AppSec) and DevSecOps.

IAM – SSO, OAuth 2.0, SAML and PAM.

Security automation, CI/CD, SAST, DAST and SCA.

Infrastructure as Code – Terraform and Ansible.

Security Risk Assessments and Risk Management.

Regulatory compliance – APRA CPS 234, CPS 230, ISO 27001 and NIST CSF.

Strong stakeholder management, consulting and technical leadership skills.

Preferred: CISSP, CISM, CCSP or cloud security certifications.

Note: Candidates must have broad cybersecurity experience combining hands-on security engineering, architecture and risk governance.