Remote Security Engineer: Build the SOC2 Playbook

DISCO; Australia; Remote; AUD 130,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Four weeks of paid vacation leave per

Two weeks of paid sick leave per year

Company laptop

Monthly internet allowance/reimburse-

Annual learning and developmentallow-

Remote work flexibility

Job summary

DISCO is seeking a Security Engineer to lead security engineering across our Python/Django/React stack and cloud infrastructure. You will own threat modelling, code reviews, CI/CD security, and drive remediation of findings in a SOC 2–compliant SaaS environment.

You will collaborate with engineering, product, legal and leadership to harden systems, define secure design standards, and build runbooks for incident response.

Qualifications

• 7+ years in engineering with 5+ years in product/security engineering.
• Experience with threat hunting, threat intelligence or red team activities.
• Strong Python/Django app security knowledge; understand vulnerabilities in this stack.
• Solid AWS cloud security experience covering IAM and network controls.
• Incident response leadership and on-call experience.
• Familiarity with SOC2 or similar compliance frameworks and risk communication.

Responsibilities

• Lead security engineering for the Python/Django/React application, including code reviews and threat modelling.
• Own static analysis, dependency scanning, and secret scanning in CI and triage findings.
• Coordinate penetration testing and drive remediation of findings.
• Partner with engineers to set secure coding standards and practical guidance.
• Define security baselines for AWS infrastructure and CI/CD pipelines.
• Build and maintain detection capabilities across app and cloud stacks; incident response runbooks.

Skills

Python/Django security

Threat hunting

Threat intelligence

Red team

Incident response

SOC2 compliance

Security leadership

Remote work awareness

Tools

AWS IAM

CI/CD security

Security testing tools

Job description

DISCO is seeking a Security Engineer to lead security engineering across our Python/Django/React stack and cloud infrastructure. You will own threat modelling, code reviews, CI/CD security, and drive remediation of findings in a SOC 2–compliant SaaS environment.

You will collaborate with engineering, product, legal and leadership to harden systems, define secure design standards, and build runbooks for incident response.