Principal Security Engineer- Devsecops / Cloud - $1440 per day

Bluefin Resources Pty; Sydney; Hybrid; AUD 350,000 - 470,000; Full time

Job summary

Bluefin Resources Pty is seeking a Principal Security Engineer for a six-month contract in a fast-moving venture environment backed by a major bank. 50% in-office hybrid role with a focus on DevSecOps, automation and security at scale across cloud platforms.

You will lead security roadmaps, convert controls to code, build secure CI/CD, and mentor the team while aligning with group standards and emerging AI initiatives.

Qualifications

• Deep experience in security engineering at a principal, lead or senior level.
• Strong hands-on DevSecOps capability with automation and IaC.
• Advanced experience with the Microsoft security stack and Sentinel.
• Experience embedding security into CI/CD workflows and cloud environments.

Responsibilities

• Drive the security engineering roadmap with focus on DevSecOps and IaC.
• Convert security controls to configuration as code and policies.
• Integrate security into CI/CD workflows for secure delivery.
• Lead vulnerability reduction initiatives across ventures.
• Provide hands-on security support across MS security tech and cloud.
• Partner with ventures on secure design to delivery.
• Mentor team members and escalate complex issues.
• Contribute to AI-enabled product initiatives where aligned.

Skills

Security engineering leadership

DevSecOps proficiency

Automation & IaC

Microsoft Sentinel expertise

CI/CD security integration

Cloud security (AWS)

Fintech/venture environment experience

Stakeholder engagement

AI security awareness

Tools

Microsoft Sentinel

AWS

Job description

Principal Security Engineer- Devsecops / Cloud - $1440 per day

A leading fast moving venture environment back by a major bank is seeking a Principal Security Engineer for an initial 6 month contract likely to extend. This is a hybrid role- 50% in office.
Responsibilities

• Drive the security engineering roadmap, with a strong focus on DevSecOps, automation and infrastructure as code.
• Convert security controls to configuration as code, including conditional access policies, identity-related detection logic and Microsoft Sentinel rules.
• Build security into CI/CD workflows and enable engineering teams to deploy securely at speed.
• Lead vulnerability reduction initiatives across the venture portfolio in alignment with broader group standards.
• Provide hands-on security engineering support across Microsoft security technologies and cloud environments.
• Partner with venture teams on new products and customer-facing initiatives, providing pragmatic security guidance from design through delivery.
• Mentor team members, share expertise and act as an escalation point for complex security challenges.
• Contribute to emerging initiatives, including AI-enabled products, where your experience aligns.

A leading fast moving venture environment back by a major bank is seeking a Principal Security Engineer for an initial 6 month contract likely to extend. This is a hybrid role- 50% in office.
Responsibilities

• Drive the security engineering roadmap, with a strong focus on DevSecOps, automation and infrastructure as code.
• Convert security controls to configuration as code, including conditional access policies, identity-related detection logic and Microsoft Sentinel rules.
• Build security into CI/CD workflows and enable engineering teams to deploy securely at speed.
• Lead vulnerability reduction initiatives across the venture portfolio in alignment with broader group standards.
• Provide hands-on security engineering support across Microsoft security technologies and cloud environments.
• Partner with venture teams on new products and customer-facing initiatives, providing pragmatic security guidance from design through delivery.
• Mentor team members, share expertise and act as an escalation point for complex security challenges.
• Contribute to emerging initiatives, including AI-enabled products, where your experience aligns.

Key Skills / Experience:

• Deep experience in security engineering at a principal, lead or senior level.
• Strong hands-on DevSecOps capability, including security automation, infrastructure as code and configuration as code.
• Advanced experience with the Microsoft security stack, including identity and access controls, detection engineering and Microsoft Sentinel.
• Experience embedding security into engineering workflows and modern CI/CD pipelines.
• Strong cloud security knowledge; AWS experience is advantageous.
• A track record of working effectively in a fintech, digital venture, scale-up or similarly agile environment.
• The ability to balance strategic leadership with practical delivery in a small team.
• Excellent stakeholder engagement, coaching and communication skills.
• AI security experience is highly regarded but not essential.