Principal Security Engineer: Strategy & Enablement

Bendigobank; Brisbane; Hybrid; AUD 220,000 - 320,000; Full time

Benefits offered by this job

Hybrid work options

Private health insurance

Gym membership discounts

Learning & development programs

Employee Assistance Program

Job summary

Bendigo Bank is seeking a Principal Engineer for Security Strategy, Enablement & Engineering to bridge cyber strategy with fast-paced software delivery. You will champion Security-as-Code, govern modern security patterns, and mentor teams across the enterprise.

Lead hands-on guardrails for GenAI, quantum-safe crypto, and container security, while standardising pipelines (SAST/DAST/SCA) across AWS, GCP, and Azure. A developer-first security culture is central to the role.

Qualifications

• Proven leadership as Principal Engineer or Lead Security Architect in a regulated enterprise.
• Hands-on IaC with Terraform/CloudFormation and CI/CD pipelines across multi-cloud.
• Strong security engineering experience: container security, cloud-native security, threat modelling.
• Knowledge of Zero Trust, identity federation, and API security.
• Ability to influence stakeholders with a developer-enabling mindset.

Responsibilities

• Define enterprise security patterns and guardrails across the organization.
• Lead explorations of GenAI governance and quantum-safe security concepts.
• Standardise CI/CD guardrails (SAST, DAST, SCA) across multiple cloud environments.
• Mentor squads and foster a security-enabled engineering culture.

Skills

Leadership

Terraform

CI/CD

Kubernetes

Zero Trust

Threat Modelling

Identity Federation

API Security

Stakeholder Influence

Developer Empathy

Tools

Terraform

CloudFormation

GitHub Actions

GitLab CI/CD

Kubernetes

Docker

CSPM/CWPP

Job description

Bendigo Bank is seeking a Principal Engineer for Security Strategy, Enablement & Engineering to bridge cyber strategy with fast-paced software delivery. You will champion Security-as-Code, govern modern security patterns, and mentor teams across the enterprise.

Lead hands-on guardrails for GenAI, quantum-safe crypto, and container security, while standardising pipelines (SAST/DAST/SCA) across AWS, GCP, and Azure. A developer-first security culture is central to the role.