Principal Security Engineer: Strategy & DevSecOps

Bendigobank; Sydney; Hybrid; AUD 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid work

Health and well-being support

Learning opportunities

Job summary

Bendigo Bank seeks a Principal Engineer for Security Strategy, Enablement & Engineering (SEE) to shape cyber security across a multi-geo banking environment. You will bridge strategy with rapid software delivery, emphasizing a developer-first, Security-as-Code mindset.

Lead enterprise security patterns, pioneer AI governance and post-quantum concepts, and mentor squads while enabling secure, compliant product delivery in a regulated bank.

Qualifications

• Proven leadership as Principal Engineer, Lead Security Architect, or similar in a complex enterprise.
• Deep hands-on IaC experience (Terraform, CloudFormation) and modern CI/CD pipelines across multi-clouds.
• Strong container and cloud-native security expertise (Kubernetes, Docker, CSPM/CWPP tooling).
• Solid foundation in enterprise security standards, threat modelling, Zero Trust, identity federation, and API security.
• Experience with emerging tech controls including AI/GenAI security and post-quantum cryptography.

Responsibilities

• Define enterprise security patterns and reference architectures across SEE.
• Prototype guardrails for GenAI enablement and quantum-safe cryptography.
• Embed Security-as-Code in CI/CD pipelines across multi-cloud environments.
• Develop and maintain reusable security blueprints and automated policy guardrails.
• Improve the Security Front Door with automated triggers and governance criteria.
• Mentor engineers and champions across the bank to foster a security-enabled culture.

Skills

Leadership experience

Security strategy

DevSecOps

Security-as-Code

Stakeholder influence

AI governance

Tools

Terraform

CloudFormation

GitHub Actions

GitLab CI/CD

Kubernetes

Docker

Job description

Bendigo Bank seeks a Principal Engineer for Security Strategy, Enablement & Engineering (SEE) to shape cyber security across a multi-geo banking environment. You will bridge strategy with rapid software delivery, emphasizing a developer-first, Security-as-Code mindset.

Lead enterprise security patterns, pioneer AI governance and post-quantum concepts, and mentor squads while enabling secure, compliant product delivery in a regulated bank.