Principal Security Engineer - DevSecOps

Paxus; Sydney; On-site; AUD 150,000 - 190,000; Full time

Job summary

Paxus is seeking a Principal Security Engineer to shape security strategy and drive automation across a diverse technology landscape in Sydney. The role focuses on DevSecOps, cloud security and embedding security into development and infrastructure processes.

You will lead security improvements, address vulnerability backlogs and convert security controls into code, aligning with Group security standards. This is a 6-month contract in Sydney CBD with hands-on technical leadership

Qualifications

• Proven Principal-level security engineering leadership.
• Extensive DevSecOps, IaC and security automation experience.
• Hands-on expertise with Microsoft security technologies (Sentinel, Entra, Defender) and AWS.

Responsibilities

• Drive security engineering roadmaps and vulnerability remediation.
• Implement DevSecOps practices, IaC and security automation.
• Configure and automate Microsoft security controls, including Entra CA and Microsoft Sentinel.
• Provide technical leadership, mentorship and escalation support to security engineers.

Skills

Security leadership

DevSecOps

IaC

Cloud security

Vulnerability management

Tools

AWS

Microsoft Sentinel

Entra

Job description

Principal Security Engineer – DevSecOps & Automation

6-Month Contract | Sydney CBD | Security Engineering | DevSecOps | AWS | Microsoft Security | IaC | Automation | AI Security | Hands-On Technical Leadership

We’re seeking an experienced Principal Security Engineer to shape security strategy, drive automation and strengthen security practices across a diverse technology environment.

Working across security engineering, DevSecOps and cloud security, you’ll lead security improvements, tackle vulnerability backlogs and embed security into development and infrastructure processes. You’ll play a key role in converting security controls, policies and detection logic into configuration-as-code, while aligning with broader Group security standards.

Key Responsibilities

• Drive security engineering roadmaps and vulnerability remediation.
• Implement DevSecOps practices, Infrastructure as Code (IaC) and security automation.
• Configure and automate Microsoft security controls, including Entra Conditional Access and Microsoft Sentinel.
• Provide technical leadership, mentorship and escalation support to security engineers.

About You

• Proven Principal-level Security Engineering experience with strong technical leadership capabilities.
• Extensive DevSecOps, IaC and security automation experience.
• Hands-on expertise across Microsoft security technologies (Sentinel, Entra, Defender, etc) and AWS.
• Experience implementing security controls and detection logic as code.
• Strong vulnerability management and remediation skills.

Why Join?

This is an opportunity to join a high-impact, hands-on security team where you will have genuine ownership and influence. Rather than operating within a narrowly defined enterprise security function, you will work across a diverse portfolio and technologies, tackling a broad range of security engineering challenges.

Paxus values diversity and welcomes applications from Indigenous Australians, people from diverse cultural and linguistic backgrounds and people living with a disability. If you require an adjustment to the recruitment process, including the application form in an alternate format, please contact me on the above contact details.