Principal Security Engineer - DevSecOps

Paxus Australia Pty Ltd.; Sydney; On-site; AUD 180,000 - 280,000; Full time

Job summary

Paxus Australia Pty Ltd. in Sydney is seeking a Principal Security Engineer to lead DevSecOps, security automation and vulnerability management across a diverse technology environment.

You will shape security strategy, implement IaC, and guide security controls and detection logic as code, partnering with engineering teams to raise security across cloud platforms such as AWS and Microsoft security tools.

Qualifications

• Proven Principal-level Security Engineering experience with strong technical leadership capabilities.
• Extensive DevSecOps, IaC and security automation experience.
• Hands-on expertise across Microsoft security technologies (Sentinel, Entra, Defender, etc) and AWS.
• Experience implementing security controls and detection logic as code.
• Strong vulnerability management and remediation skills.

Responsibilities

• Drive security engineering roadmaps and vulnerability remediation.
• Implement DevSecOps practices, Infrastructure as Code (IaC) and security automation.
• Configure and automate Microsoft security controls, including Entra Conditional Access and Microsoft Sentinel.
• Provide technical leadership, mentorship and escalation support to security engineers.

Skills

Security leadership

DevSecOps

IaC

Automation

Cloud security

AWS

Microsoft security

Tools

AWS

Microsoft Sentinel

Entra

Defender

Job description

Principal Security Engineer – DevSecOps & Automation

6-Month Contract | Sydney CBD | Security Engineering | DevSecOps | AWS | Microsoft Security | IaC | Automation | AI Security | Hands-On Technical Leadership

We’re seeking an experienced Principal Security Engineer to shape security strategy, drive automation and strengthen security practices across a diverse technology environment.

Working across security engineering, DevSecOps and cloud security, you’ll lead security improvements, tackle vulnerability backlogs and embed security into development and infrastructure processes. You’ll play a key role in converting security controls, policies and detection logic into configuration-as-code, while aligning with broader Group security standards.

Key Responsibilities

• Drive security engineering roadmaps and vulnerability remediation.
• Implement DevSecOps practices, Infrastructure as Code (IaC) and security automation.
• Configure and automate Microsoft security controls, including Entra Conditional Access and Microsoft Sentinel.
• Provide technical leadership, mentorship and escalation support to security engineers.

About You

• Proven Principal-level Security Engineering experience with strong technical leadership capabilities.
• Extensive DevSecOps, IaC and security automation experience.
• Hands-on expertise across Microsoft security technologies (Sentinel, Entra, Defender, etc) and AWS.
• Experience implementing security controls and detection logic as code.
• Strong vulnerability management and remediation skills.

Why Join?

This is an opportunity to join a high-impact, hands-on security team where you will have genuine ownership and influence. Rather than operating within a narrowly defined enterprise security function, you will work across a diverse portfolio and technologies, tackling a broad range of security engineering challenges.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.