Security Engineer - SaaS & Cloud Security (Hybrid Sydney)

CreditorWatch; Sydney; Hybrid; AUD 140,000 - 210,000; Full time

Benefits offered by this job

Gym membership

Free coffee/services

Phone allowance

Wellness days

Monthly massages

Bonus shares

Team events

Legal services

Job summary

CreditorWatch is building a dedicated Security Engineering function to actively operate and integrate security across enterprise and product domains. This hands-on role spans IAM, Zero Trust, DLP, SSE, EDR and application security, with time split between corporate security and secure software development.

You will work across endpoints, SaaS platforms, CI/CD pipelines, and cloud infrastructure, partnering with Engineering to embed security into delivery and governance.

Qualifications

• Hands-on security expertise across multiple domains with a generalist capability.
• Experience embedding security into CI/CD, cloud-native software, and SaaS.
• Strong understanding of IAM, SSO, and least privilege concepts.

Responsibilities

• Improve security posture across SaaS platforms, endpoints, and networks.
• Operate and tune enterprise security solutions (SSE, EDR, DLP, IAM).
• Support product security through reviews, threat modelling, and remediation.
• Embed security controls within CI/CD pipelines and automate feedback loops.
• Mentor engineers, uplift security awareness, and drive risk remediation.

Skills

Security engineering

Cloud security (AWS)

CI/CD security

Application security

Threat modelling

Vulnerability management

IAM & SSO

Scripting (Python/Bash)

Tools

EDR

SSE/SWG

DLP

Email security

CI/CD security tooling

Job description

CreditorWatch is building a dedicated Security Engineering function to actively operate and integrate security across enterprise and product domains. This hands-on role spans IAM, Zero Trust, DLP, SSE, EDR and application security, with time split between corporate security and secure software development.

You will work across endpoints, SaaS platforms, CI/CD pipelines, and cloud infrastructure, partnering with Engineering to embed security into delivery and governance.