Security Engineering Senior Engineer (Security Features)

Telstra; City of Melbourne; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Job summary

Telstra is seeking a seasoned security or application engineer to lead and design protection for web applications across cloud and on-premises environments. You will collaborate with cyber security teams, guide integration efforts, and drive secure design reviews and incident response planning.

The role emphasizes hands-on engineering for application security platforms, ongoing improvement, and cross-functional collaboration within a large enterprise.

Qualifications

• 5-10 years extensive experience deploying Application Security (Akamai, Radware, Cloudflare, F5, AWS, Azure, Imperva) and configuring security policies for protecting web and other applications.
• DevOps/DevSecOps background.
• Strong background in Web Application Firewall (WAF) and troubleshooting.
• Knowledge of container security and orchestration (Docker, Kubernetes).
• Experience with IaC and CI/CD tools to treat security configurations as code.

Responsibilities

• Engage business/tech stakeholders to protect applications using cloud and AI-based platforms.
• Lead design, engineering and support of Telstra's security platforms for web apps.
• Guide application owners on integration and troubleshooting.
• Conduct architecture reviews and implement security solutions.
• Evaluate security products and contribute to roadmaps and standards.
• Drive readiness and lifecycle management of app security platforms.
• Provide engineering consulting and incident response planning with Cyber Security teams.
• Serve as SME and technical lead for application security.

Education

Bachelor's degree in Engineering or IT

Tools

Docker

Kubernetes

Terraform

Git

GitHub Actions

GitLab CI

ArgoCD

AWS

Azure

Python

Go

Java

Node.js

Job description

• Engage key business and technology stakeholders to protect their applications using cutting edge cloud and AI-based platforms.
• Lead the design, engineering, and technical support of Telstra's security platforms for protecting web applications.
• Assist and guide application owners with technology integration and troubleshooting.
• Conduct architecture reviews, configuration, and implementation of security solutions.
• Evaluate security products and contribute to technology roadmaps and standards.
• Drive operational readiness and lifecycle management of application security platforms.
• Provide engineering consulting and contribute to incident response planning with Cyber Security teams.
• Act as the subject matter expert and technical lead for application security within the team.

What You'll Do

• Engage key business and technology stakeholders to protect their applications using cutting edge cloud and AI-based platforms.
• Lead the design, engineering, and technical support of Telstra's security platforms for protecting web applications.
• Assist and guide application owners with technology integration and troubleshooting.
• Conduct architecture reviews, configuration, and implementation of security solutions.
• Evaluate security products and contribute to technology roadmaps and standards.
• Drive operational readiness and lifecycle management of application security platforms.
• Provide engineering consulting and contribute to incident response planning with Cyber Security teams.
• Act as the subject matter expert and technical lead for application security within the team.

About You

You are a seasoned security or application engineer with:

• 5-10 years extensive experience in successfully deploying Application Security (Akamai, Radware, Cloudflare, F5, AWS, Azure, Imperva) and configuring security policies for protecting different web and other applications.
• DevOps experience, preferably with a strong DevSecOps background.
• Strong background in Web Application Firewall (WAF), web application support, and troubleshooting.
• Are able to apply up-to-date security best practices to multiple applications and technologies.
• Container Security & Orchestration: Container Security & Orchestration: Deep knowledge of Docker and Kubernetes (specifically how to deploy container apps, sidecars, or daemonsets safely).
• CI/CD & IaC: Advanced with Git, Terraform, and pipeline tools (GitHub Actions, GitLab CI) to treat security configurations as code.
• Experience interacting with vendor APIs, handling OAuth/API tokens, and writing event-driven code (e.g., AWS Lambda or Azure Functions).
• Robust Scripting/Programming: Strong proficiency in Python or Go to interact with APIs and handle JSON/YAML parsing.
• Intermediate to advanced development experience in Java and Node.js
• Intermediate to advanced understanding of network routing and switching protocols (IP, TCP, UDP, etc.).
• Proven ability to work independently and manage stakeholder relationships.
• Experience collaborating in large enterprise environments and cross-functional teams.
• A mindset geared towards innovation, simplification, and continuous improvement.
• Excellent communication and leadership skills, with the ability to guide and mentor others.
• Nice to have: Proficiency in Python.
• Nice to have: Proficiency with Terraform.
• Nice to have: Experience using GitLab CI, GitHub Actions, or ArgoCD.

Preferred Qualifications

• Bachelor's degree in Engineering or IT.
• Certifications such as Cisco CCNP/CCIE, Juniper JNCIS/JNCIE, CISSP.