Remote Security Engineer — App, Cloud & Incident Response

Disco; Australia; Remote; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive salary

4 weeks paid vacation

2 weeks paid sick leave

Paid Parental Leave

Company laptop

Monthly internet allowance

Office set-up allowance

Annual learning and development allow

Job summary

DISCO is seeking a Security Engineer to advance our SOC 2-compliant SaaS security program. You will own end-to-end security across internal and application layers, cloud infra, detection and response, and compliance.

You will partner with engineering, product, legal and leadership to harden systems and develop runbooks for incident response. The role emphasizes remote work from Australia, cross-timezone collaboration, and building a security-first culture while shaping our security roadmap and

Qualifications

• 7+ years in engineering and 5+ years of hands-on security experience in product security or security engineering.
• Experience with threat hunting, threat intelligence, or red team activities.
• Strong Python/Django application security knowledge and secure coding practices.

Responsibilities

• Lead security engineering for the Python/Django/React application, including code reviews and threat modelling.
• Own static analysis, dependency scanning, secret scanning in CI and triage of findings.
• Coordinate penetration testing and drive remediation of findings.
• Partner with engineers to set secure coding standards and guidance.
• Build and maintain detection capabilities across app, cloud, and SaaS stack.

Skills

Security engineering

Python/Django security

AWS security

Incident response

SOC2/compliance

Threat hunting

Risk communication

Remote work

Tools

CI/CD security tooling

Job description

DISCO is seeking a Security Engineer to advance our SOC 2-compliant SaaS security program. You will own end-to-end security across internal and application layers, cloud infra, detection and response, and compliance.

You will partner with engineering, product, legal and leadership to harden systems and develop runbooks for incident response. The role emphasizes remote work from Australia, cross-timezone collaboration, and building a security-first culture while shaping our security roadmap and