Security Architect - DevSecOps & AI

Decipher Bureau; Sydney; On-site; AUD 140,000 - 200,000; Full time

Job summary

Decipher Bureau is seeking a hands‑on Security Architect to embed security into Gen AI, cloud, and modern engineering practices. You will work across AWS, GCP, and Azure, guiding threat modelling, security controls, and secure delivery pipelines at scale.

The role emphasizes practical security engineering over gatekeeping, with a strong focus on AI security concepts, container runtimes, and collaboration with product and engineering teams to enable innovation.

Qualifications

• Hands‑on engineering or solutions experience, write scripts, debug pipelines and get into the weeds.
• Practical understanding of AI security concepts like prompt injection.
• Familiarity with LangGraph and ADK frameworks.
• Real experience with CI/CD platforms and Git‑based tools, plus supply chain security.
• Hands‑on expertise securing container runtimes across major cloud providers.
• Strong communication skills and ability to influence engineering teams.
• Risk‑aware mindset enabling innovation not slowing it.

Responsibilities

• Lead threat modelling and design security controls for agentic and A2A architectures, incl. prompt injection mitigations.
• Build and oversee CI/CD security controls, write automation scripts, resolve dependency issues hands‑on.
• Set security architecture across AWS, GCP, and Azure with a focus on container runtime security.
• Advise technical stakeholders, translating risk into pragmatic, business‑friendly strategies.

Skills

Hands‑on engineering

Security mindset

Strong communication

Risk‑aware mindset

Tools

GitHub Enterprise

GitLab

CI/CD automation

Container runtimes security

LangGraph

ADK

AWS

GCP

Azure

Job description

New Opportunity: Security Architect – DevSecOps & AI

We're supporting a leading global financial services organisation, who are looking for a hands-on Security Architect to secure its next‑gen technology platforms.

This role suits an engineer or solutions‑minded builder with a security mindset, not a traditional security architect. You'll work at the intersection of AI, cloud, and modern engineering practice, embedding security into the fabric of how the business builds and ships software, not as a gatekeeper, but as a genuine enabler of innovation.

What you'll do

• Lead threat modelling and design security controls for agentic and Agent-to-Agent (A2A) architectures, including mitigations for prompt injection
• Build and oversee CI/CD security controls, writing automation scripts and resolving dependency issues hands‑on
• Set security architecture across AWS, GCP, and Azure, with a focus on container runtime security
• Advise technical stakeholders, translating risk into pragmatic, business‑friendly strategies

What you bring

• Hands‑on engineering or solutions experience, you can write scripts, debug pipelines, and get into the weeds
• Practical understanding of AI security concepts like prompt injection, not just theory
• Familiarity with multi‑agent frameworks such as LangGraph and ADK
• Real experience with CI/CD platforms and Git‑based tools (GitHub Enterprise, GitLab), plus supply chain security
• Hands‑on expertise securing container runtimes across major cloud providers
• Strong communication skills and the ability to influence engineering teams
• A risk‑aware mindset that enables innovation rather than slowing it

We're especially interested in people who've come up through engineering or product‑focused roles rather than a conventional security career path, including those from smaller organisations where you've worn multiple hats. Architectural pattern‑building can be learned on the job; deep hands‑on engineering skills cannot.

If you're excited by the challenge of securing AI‑driven, cloud‑native platforms at scale, we'd love to hear from you.