Security-Focused Software Engineer (Cloud & AI)

Acorn; Canberra; On-site; AUD 125,000 - 160,000; Full time

Benefits offered by this job

Office-based role

Competitive salary + 12% superannution

Opportunities to work with government-

Job summary

Acorn is seeking a Software Engineer (Security) to strengthen our PLMS platform. You’ll collaborate with every product team, reporting to the Director of Information Security, and own secure-by-design practices across code, tests and deployments.

In this IC3 role, you’ll mentor peers, lead threat modelling, and help shape secure architectures while partnering with Infrastructure and Engineering. You’ll build with PHP, React+TypeScript and Terraform to ship fixes and tooling, focusing on speed

Qualifications

• 3+ years building production web applications in PHP, with the habits that go with it: tests, code review and CI.
• Experience with application security: OWASP Top 10, injection, access control, SSRF.
• Hands-on experience with a cloud platform (ideally AWS) and infrastructure-as-code (ideally Terraform).
• Comfortable in agile product teams: two-week sprints, refinement and estimation, shipping behind feature flags.
• Ability to explain security risk to product managers and developers in plain language.
• Baseline security clearance preferred, or ability to obtain one.
• Nice to have: CI security tooling, identity work (SAML, OIDC), Australian government frameworks (ISM, Essential Eight, IRAP), or bug-bounty experience.

Responsibilities

• Review pull requests for security issues and provide actionable feedback.
• Triage and fix findings from code, dependency, container and cloud scanning.
• Threat-model new features and translate results into tests and acceptance criteria.
• Build secure-by-default patterns in code and infrastructure (auth, input validation, tenant isolation, secrets handling, least-privilege, CI gates).
• Collaborate with Infrastructure and development teams on fixes, platform changes and rollouts.
• Support customer security reviews, pen-test remediation and incident response with evidence from code.
• Ship fixes and tooling in PHP, React with TypeScript and Terraform, with tests and production follow-through.

Skills

Security engineering

Threat modelling

Technical leadership

Mentoring

Tools

PHP

React

TypeScript

Terraform

AWS

Job description

Acorn is seeking a Software Engineer (Security) to strengthen our PLMS platform. You’ll collaborate with every product team, reporting to the Director of Information Security, and own secure-by-design practices across code, tests and deployments.

In this IC3 role, you’ll mentor peers, lead threat modelling, and help shape secure architectures while partnering with Infrastructure and Engineering. You’ll build with PHP, React+TypeScript and Terraform to ship fixes and tooling, focusing on speed