Security Engineer: Build Secure, AI‑Driven Web Apps

Acorn; Sydney; In loco; AUD 125.000 - 160.000; Tempo pieno

Descrizione del lavoro

Acorn is seeking a full‑time Software Engineer (Security) in Canberra or Sydney to join as an IC3 specialist. You will work across product teams to harden the platform, fix vulnerabilities, and mentor others, reporting to the Director of Information Security.

The role combines secure coding, cloud security, and leadership in a fast‑growing AI‑driven PLMS company. With 3+ years building PHP web apps, you’ll apply threat modelling, AWS‑based infrastructure and Terraform, while driving secure

Competenze

• 3+ years building production web applications in PHP with tests, code reviews and CI.
• Working knowledge of application security: the OWASP Top 10, injection, broken access control and SSRF.
• Hands-on experience with a cloud platform (ideally AWS) and infrastructure-as-code (Terraform).
• Comfortable in agile product teams: two-week sprints, refinement and estimation, and shipping behind feature flags.
• You can explain a security risk to a product manager and a developer in plain language.
• Baseline security clearance is preferred, or the ability to obtain one.
• Nice to have: CI security tooling (SAST, SCA), identity work (SAML, OIDC), Australian government frameworks (ISM, Essential Eight, IRAP), or bug-bounty experience.

Mansioni

• Review pull requests for security issues and give feedback a developer can act on
• Triage and fix findings from code, dependency, container and cloud scanning at the root cause
• Threat‑model new features with the team building them, and turn the results into tests and acceptance criteria
• Build secure‑by‑default patterns the development teams reuse, in code and infrastructure: authentication, input validation, tenant isolation, secrets handling, least‑privilege access and CI security gates
• Partner with Infrastructure and development teams on shared fixes, platform changes and rollouts
• Support customer security reviews, penetration‑test remediation and incident response with evidence from the code
• Ship your own fixes and tooling in PHP, React with TypeScript and Terraform, with tests and production follow‑through

Conoscenze

PHP

React + TypeScript

Terraform

Cloud security

Threat modelling

Strumenti

AWS

CI tooling

SAST

SCA

Descrizione del lavoro

Acorn is seeking a full‑time Software Engineer (Security) in Canberra or Sydney to join as an IC3 specialist. You will work across product teams to harden the platform, fix vulnerabilities, and mentor others, reporting to the Director of Information Security.

The role combines secure coding, cloud security, and leadership in a fast‑growing AI‑driven PLMS company. With 3+ years building PHP web apps, you’ll apply threat modelling, AWS‑based infrastructure and Terraform, while driving secure