Principal Security Engineer | Cyber Security Advisor | Contract

The Missing Link; Melbourne; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

The Missing Link is seeking a Principal Security Engineer / Cyber Security Advisor for a 12-month hybrid engagement in Melbourne. You will lead security architecture reviews, threat modelling, and risk assessments across AWS and GCP, embedding secure-by-design principles into DevSecOps pipelines.

You will mentor security teams, advise on IAM, SSO, and security controls aligned with APRA CPS 234, CPS 230, ISO 27001 and the Privacy Act, in a highly regulated financial services context.

Qualifications

• Senior-level cyber security engineering or security architecture experience.
• Strong AWS and/or GCP cloud security capability.
• Experience with threat modelling, risk assessments and security controls.
• Knowledge across IAM, AppSec, network security and DevSecOps.
• Experience with CI/CD security, SAST/DAST/SCA and security automation.

Responsibilities

• Lead security architecture reviews and threat modelling.
• Conduct comprehensive security risk assessments.
• Design secure architecture patterns and cloud security standards.
• Provide security guidance across AWS and/or GCP.
• Embed security controls into DevSecOps/CI/CD environments.
• Advise across IAM, SSO, PAM and federated identity.
• Develop risk-based security controls and manage exceptions.
• Partner with engineering, architecture, risk and stakeholders.
• Ensure alignment with regulatory and security frameworks.

Skills

Security architecture

Threat modelling

Cloud security (AWS/GCP)

DevSecOps

IAM / SSO / PAM

CI/CD security

SAST / DAST / SCA

Terraform / IaC

Docker / Kubernetes

Entra ID / Okta

Education

Bachelor's degree in CS or related field

Tools

Terraform

Docker

Kubernetes

Okta

Microsoft Entra ID

Job description

About The Missing Link

The Missing Link is a leading Australian IT and Cyber Security services provider. We're seeking an experienced Principal Security Engineer / Cyber Security Advisor for a 12-month contract engagement in Melbourne, with potential for extension.

This is a senior, consulting-led role combining security engineering, architecture, cloud security and cyber risk advisory within a complex enterprise environment.

About the Role

You'll act as a trusted technical security advisor, working across engineering, architecture and business teams to deliver secure-by-design solutions and pragmatic, risk-based security controls.

The environment spans AWS/GCP, application security, IAM, DevSecOps, network security, threat modelling and governance, with a strong focus on Australian financial services regulation.

Key Responsibilities

• Lead security architecture reviews, solution assessments and threat modelling
• Conduct comprehensive security risk assessments
• Design secure architecture patterns, controls and cloud security standards
• Provide security guidance across AWS and/or GCP
• Embed security controls into DevSecOps and CI/CD environments
• Advise across IAM, SSO, PAM and federated identity
• Develop practical, risk-based controls and manage security exceptions
• Partner with engineering, architecture, risk and business stakeholders
• Ensure solutions align with relevant regulatory and security frameworks
• Provide senior technical security leadership and mentoring

About You

You're an experienced security practitioner with broad capability across security engineering, architecture and risk, rather than a specialist in only one security technology.

Essential Experience

• Significant senior-level cyber security engineering or security architecture experience
• Strong AWS and/or GCP cloud security capability
• Security architecture, threat modelling and risk assessment experience
• Strong knowledge across IAM, AppSec, network security and DevSecOps
• Experience with CI/CD security, SAST, DAST, SCA and security automation
• Understanding of Terraform/IaC, Docker and Kubernetes
• Experience with modern identity platforms such as Microsoft Entra ID and/or Okta
• Strong understanding of risk-based security control design
• Experience working in highly regulated enterprise environments
• Knowledge of APRA CPS 234, CPS 230, ISO 27001, NIST CSF, Essential Eight and the Privacy Act 1988
• Strong stakeholder management and the to of ..?? - ...??

Desirable Certifications

CISSP, CISM, CCSP, AWS Security Specialty or Google Professional Cloud Security Engineer certifications will be highly regarded but are not mandatory.

Contract Details

• 12-month contract, with potential extension
• Melbourne
• Hybrid
• Senior / Principal-level engagement