Principal Security Engineer - DevSecOps

Paxus; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Paxus is seeking an experienced Principal Security Engineer to shape security strategy across a diverse technology environment in Sydney. You will lead security improvements, drive automation and embed security into development and infrastructure processes.

This 6-month contract focuses on DevSecOps, IaC and cloud security across AWS and Microsoft security tools. You will mentor engineers, convert controls into code and tackle vulnerability backlogs, delivering hands-on technical leadership.

Qualifications

• Proven Principal-level Security Engineering experience with strong technical leadership.
• Extensive DevSecOps, IaC and security automation experience.
• Hands-on expertise across Microsoft security technologies (Sentinel, Entra, Defender) and AWS.
• Experience implementing security controls and detection logic as code.
• Strong vulnerability management and remediation skills.

Responsibilities

• Drive security engineering roadmaps and vulnerability remediation.
• Implement DevSecOps practices, Infrastructure as Code (IaC) and security automation.
• Configure and automate Microsoft security controls, including Entra Conditional Access and Microsoft Sentinel.
• Provide technical leadership, mentorship and escalation support to security engineers.

Skills

DevSecOps

Security engineering

IaC

Automation

Cloud security

Vulnerability management

Tools

Microsoft Sentinel

Entra

Defender

AWS

Job description

Principal Security Engineer – DevSecOps & Automation

6-Month Contract | Sydney CBD | Security Engineering | DevSecOps | AWS | Microsoft Security | IaC | Automation | AI Security | Hands-On Technical Leadership

We’re seeking an experienced Principal Security Engineer to shape security strategy, drive automation and strengthen security practices across a diverse technology environment.

Working across security engineering, DevSecOps and cloud security, you’ll lead security improvements, tackle vulnerability backlogs and embed security into development and infrastructure processes. You’ll play a key role in converting security controls, policies and detection logic into configuration-as-code, while aligning with broader Group security standards.

Key Responsibilities

• Drive security engineering roadmaps and vulnerability remediation.
• Implement DevSecOps practices, Infrastructure as Code (IaC) and security automation.
• Configure and automate Microsoft security controls, including Entra Conditional Access and Microsoft Sentinel.
• Provide technical leadership, mentorship and escalation support to security engineers.

About You

• Proven Principal-level Security Engineering experience with strong technical leadership capabilities.
• Extensive DevSecOps, IaC and security automation experience.
• Hands-on expertise across Microsoft security technologies (Sentinel, Entra, Defender, etc) and AWS.
• Experience implementing security controls and detection logic as code.
• Strong vulnerability management and remediation skills.

Why Join?

This is an opportunity to join a high-impact, hands-on security team where you will have genuine ownership and influence. Rather than operating within a narrowly defined enterprise security function, you will work across a diverse portfolio of ventures and technologies, tackling a broad range of security engineering challenges.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.