Remote Security Engineer (SaaS & Cloud)

DISCO; Adelaide; Remote; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Four weeks of paid vacation leave per

Two weeks of paid sick leave per year

Paid Parental Leave

Company laptop

Monthly internet allowance/reimburse

Office set-up allowance

Annual learning and development

Flexible remote work

Job summary

DISCO is hiring a Senior Security Engineer to own end-to-end security across internal and customer-facing systems. You will lead security design reviews, implement CI/CD security, and partner with engineering to enforce secure coding and access controls.

The role spans threat hunting, incident response, and risk reporting in a remote Australia-based setup. You will shape the security program, mentor engineers, and drive a security-first culture while supporting SOC2 readiness and

Qualifications

• 7+ years in engineering with 5+ years in hands-on security in product/app/security engineering.
• Experience with threat hunting, threat intelligence, or red team activities.
• Strong Python/Django application security knowledge.
• Solid AWS cloud security experience including IAM, network controls and architecture patterns.
• Practical incident response experience including on-call leadership.
• Working knowledge of SOC2 or comparable compliance mapped to engineering practice.
• Ability to communicate risk clearly to technical and non-technical audiences.
• Comfort working autonomously in a remote, cross-timezone environment.

Responsibilities

• Lead security engineering for our Python/Django/React application, including code reviews and threat modelling.
• Own static analysis, dependency scanning, secret scanning in CI and triage of findings.
• Coordinate penetration testing and drive remediation of findings.
• Partner with engineers to set secure coding standards and provide practical guidance.
• SSO/MFA enforcement for internal tooling, on and offboarding processes and access reviews.
• Secure, auditable staff platform access.
• Collaborate with Platform team to secure AWS environment and perform baseline automation.
• Define and automate security baselines for infrastructure and CI/CD pipeline integrity.
• Lead secure architecture reviews for new systems and significant infrastructure changes.
• Build and maintain detection capabilities across our stack and manage incident response.
• Develop runbooks and response playbooks for incidents.
• Contribute to SOC2 compliance program and audit readiness.
• Communicate security risks to engineering and leadership, and drive remediation priorities.
• Contribute to security policies and documentation.
• Define the security roadmap and mentor engineers.

Skills

Threat hunting

Threat intelligence

Red team activities

Python/Django security

AWS security

Incident response

SOC2/compliance

Security risk communication

Remote cross-timezone work

Tools

CI/CD security tooling

Job description

DISCO is hiring a Senior Security Engineer to own end-to-end security across internal and customer-facing systems. You will lead security design reviews, implement CI/CD security, and partner with engineering to enforce secure coding and access controls.

The role spans threat hunting, incident response, and risk reporting in a remote Australia-based setup. You will shape the security program, mentor engineers, and drive a security-first culture while supporting SOC2 readiness and