Security Engineer

Matchbox; Sydney; Hybrid; AUD 140,000 - 210,000; Full time

Job summary

Q-CTRL in Sydney is seeking a Senior Security Engineer to design, implement, and maintain secure infrastructure for quantum computing software. You’ll work on Kubernetes clusters, cloud networking, and Zero Trust architectures while ensuring compliance and robust incident response.

The role requires hands-on security engineering with experience in SIEM/SOC tooling, vulnerability management, and AI-assisted security practices. On-site duties in Sydney with a collaborative, security-first culture.

Qualifications

• Experience in securing cloud-native environments (Kubernetes, containers).
• Proven ability to design and implement secure DevSecOps pipelines.
• Knowledge of security frameworks, access control and data protection.

Responsibilities

• Improve security of Kubernetes clusters and cloud networking.
• Implement Zero Trust architectures and firewall controls.
• Lead vulnerability management and incident response activities.
• Maintain security guardrails and access control mechanisms.
• Triage security alerts using SIEM/SOC tools.

Skills

DevSecOps

Kubernetes

Cloud networking

Zero Trust

SIEM/SOC

Incident response

Threat modelling

Tools

Splunk

Microsoft Sentinel

OpenTelemetry

Grafana

Sysdig

Falco

Job description

# Security EngineerQ-CTRLOn-site • SydneyFull-Time / Permanent## Role OverviewAbout the teamAt Q-CTRL, Quantum Computing Engineering is a global team of software engineers and infrastructure experts, combining deep technical expertise with a startup mindset to deliver real impact through software innovation. Our work is underpinned by robust standards, and by embracing the three virtues. Our team excels in areas across back-end, front-end, machine learning, and platform engineering.We transform Q-CTRL’s world-leading technological breakthroughs into commercial software products with applications across defense, research, and industry. We work closely with Product, Design, and Research teams to accelerate the path to quantum advantage worldwide.About the RoleThe Q-CTRL Infrastructure team is part of the backbone of our software platform and hardware initiatives. Guided by our vision to make the right way the easy way, our mission is to build reliable, secure and maintainable infrastructure that enables Q-CTRL to scale its revolutionary quantum technology.Q-CTRL faces a dynamic security landscape shaped by industry, customer and compliance requirements, which is now evolving in a post-Mythos era. The Infrastructure team is expanding to bring on a Senior Security Engineer with a focus on designing, implementing, and maintaining systems to fulfil the Q-CTRL Security Objectives, as well as identifying practical ways to leverage AI within our security engineering practices.What you’ll be doing* Reporting to the Engineering Manager for Infrastructure, you’ll play a hands-on role in ensuring we deliver the highest security standards for Q-CTRL products and maintain the trust our customers place in us.* Strengthening the security of the Q-CTRL platform through contribution to key systems such as Kubernetes clusters, cloud networking, Zero Trust network architectures and firewalls.* Consistently upholding compliance with security frameworks through the improvement of systems and processes. This includes access control mechanisms, data management and security guardrails.* Applying knowledge in forensics and incident response to triage incidents and applying expertise to improve alerting.* Refining and maturing our vulnerability management systems in order to improve key security metrics for Q-CTRL.* Other duties within the Employee's skills and experience, or with reasonable training.Ideally you’ll have* Previous experience in DevSecOps or DevOps with a dedicated security engineering focus.* Cloud networking and Kubernetes experience, including knowledge of ZTNA and secure network access.* Experience with firewall technologies, at both the cloud (e.g., AWS, GCP, Azure) and application levels.* Experience working with SIEM/SOC tooling such as Splunk or Microsoft Sentinel to identify and triage security alerts.It would be fantastic if you have these skills/experience but not essential:* xperience maintaining a vulnerability management system, including running threat modelling sessions and maintaining risk registers.* Experience with Kubernetes runtime security tooling such as Falco or Sysdig.* Relevant security or Kubernetes certifications, such as Certified Kubernetes Security Specialist (CKS) or Offensive Security Certified Professional (OSCP).* Experience with AI-assisted security scanning or penetration testing.* Red teaming experience, particularly within cloud or AWS environments.* Experience using open-source observability tooling such as OpenTelemetry and Grafana to set up security alerting and monitoring.* Hands-on experience hardening Linux operating systems and container images.