Remote Security Engineer – AppSec & AWS

DISCO; Australia; Remote; AUD 130,000 - 170,000; Full time

Benefits offered by this job

Four weeks of paid vacation leave

Two weeks paid sick leave

Paid Parental Leave

Company laptop

Monthly internet allowance

Office set-up allowance

Annual learning and development (L&D)‑

Job summary

DISCO is seeking a Security Engineer in Australia to advance our SOC 2 compliant security program. You’ll own end-to-end security for our SaaS platform, collaborating with engineering, product, legal and leadership to harden systems and protect customer data.

You’ll lead secure coding, cloud security, incident response, and threat detection, while mentoring engineers and shaping the security roadmap. This remote role offers flexibility and a fast-growing startup environment.

Qualifications

• 7+ years in engineering and 5+ years in security roles.
• Experience with threat hunting/threat intelligence or red team activities.
• Strong Python/Django security knowledge for remediation and design.
• Solid AWS cloud security experience across IAM and network controls.
• Incident response experience including on-call leadership.
• Familiar with SOC2 or comparable frameworks, mapped to engineering practice.
• Ability to communicate risk to technical and non-technical audiences.
• Comfort working autonomously in a remote, cross-timezone environment.

Responsibilities

• Lead security engineering for Python/Django/React app, including code reviews and threat modelling.
• Own static analysis, dependency scanning, secret scanning in CI.
• Coordinate penetration testing and drive remediation of findings.
• Partner with engineers to set secure coding standards.
• Define security baselines for infrastructure and CI/CD integrity.
• Lead secure architecture reviews for new systems and significant changes.
• Build and maintain detection capabilities across app, cloud, and SaaS stack.
• Manage security incident response lifecycle.

Skills

7+ years engineering

Threat hunting

Python/Django security

AWS security

Incident response

SOC2 compliance

Risk communication

Remote work

Job description

DISCO is seeking a Security Engineer in Australia to advance our SOC 2 compliant security program. You’ll own end-to-end security for our SaaS platform, collaborating with engineering, product, legal and leadership to harden systems and protect customer data.

You’ll lead secure coding, cloud security, incident response, and threat detection, while mentoring engineers and shaping the security roadmap. This remote role offers flexibility and a fast-growing startup environment.