Senior AI SDLC Cyber Security Analyst - DevSecOps Lead

Interpro People; Sydney; Hybrid; AUD 166,000 - 185,000; Full time

Job summary

Interpro People is seeking a Senior Cyber Security Analyst to help design and implement automated security gates within DevSecOps pipelines across the software development lifecycle in Sydney's hybrid setting.

The role combines hands-on security engineering with governance, risk and compliance, requiring collaboration with engineering, infrastructure and operations teams to ensure secure, compliant software delivery.

Qualifications

• 10+ years in cyber security with at least 5 in cyber security/application security/DevSecOps.
• Experience implementing automated security gates in enterprise CI/CD environments.
• Familiarity with GitHub Actions, GitLab CI, Jenkins, Azure DevOps, Docker, Harness and JFrog.
• Strong documentation, analytical, organizational and stakeholder management skills.

Responsibilities

• Gather security requirements and design, implement and test automated security gates within CI/CD pipelines.
• Optimise controls to minimise false positives and maintain efficient developer workflows.
• Manage security exemptions, bypass requests and risk acceptances, including mitigating controls and application risk registers.
• Track security assessments and compliance activities in OneTrust, mapping controls and supporting evidence to regulatory and internal requirements.
• Collaborate with infrastructure teams to integrate controls into infrastructure-as-code and cloud landing zones.
• Produce operating procedures, implementation plans and handover documentation to support operational readiness.
• Facilitate stakeholder workshops, assess change impacts and report security risks, metrics and performance to senior leadership.

Skills

Cyber security

DevSecOps

Governance

CI/CD security

Documentation

Stakeholder mgmt

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Docker

Harness

JFrog

Job description

Interpro People is seeking a Senior Cyber Security Analyst to help design and implement automated security gates within DevSecOps pipelines across the software development lifecycle in Sydney's hybrid setting.

The role combines hands-on security engineering with governance, risk and compliance, requiring collaboration with engineering, infrastructure and operations teams to ensure secure, compliant software delivery.