Senior AppSec Engineer — Secure DevOps & Product Security (Hybrid)

Creditorwatch; Sydney; Hybrid; AUD 140,000 - 180,000; Full time

Benefits offered by this job

Fitness First - Access to a Fitness 1

Daily Fuel - Barista-made coffee, etc.

Phone Credits - $50 per month towards$

Job summary

CreditorWatch in Sydney is seeking a hands-on Security Engineer to strengthen security across our enterprise and product teams. You’ll embed secure development practices, tune IAM, EDR, SSE, DLP and cloud controls, and work with engineers to improve our security posture.

Joining our Security Engineering function, you’ll operate, integrate and optimize security tooling, drive vulnerability management and ensure secure CI/CD delivery across our SaaS platforms and services.

Qualifications

• Hands-on experience across multiple security domains.
• Secure code reviews, threat modelling and vulnerability management in cloud-native or SaaS environments.
• Knowledge of IAM, networking, and security tooling in cloud platforms.
• Familiarity with EDR, SSE/SWG, DLP, email security.
• Understanding of SSO, OAuth, OIDC, SAML and least-privilege principles.
• Experience embedding security into CI/CD pipelines.
• Automation scripting with Python, Bash or APIs.
• Awareness of ISO 27001, SOC 2 and OWASP Top 10.
• Ability to translate technical findings for engineers.
• Curiosity, adaptability and collaborative problem-solving.

Responsibilities

• Strengthen enterprise security across SaaS platforms and office networks.
• Operate and tune IAM, EDR, SSE, DLP and email security solutions.
• Improve threat detection with effective monitoring and runbooks.
• Embed security into CI/CD pipelines with automated feedback.
• Partner with Engineering to secure products and supply chains.
• Guide vulnerability management and risk-based remediation.
• Contribute to incident response and compliance activities (ISO 27001, SOC 2).

Skills

Security engineering

Threat modelling

Cloud security

Identity & access management

CI/CD security

SAST/SCA tooling

Vulnerability management

Python/Bash scripting

Communication

ISO 27001 / SOC 2 knowledge

Tools

Security tooling

Job description

CreditorWatch in Sydney is seeking a hands-on Security Engineer to strengthen security across our enterprise and product teams. You’ll embed secure development practices, tune IAM, EDR, SSE, DLP and cloud controls, and work with engineers to improve our security posture.

Joining our Security Engineering function, you’ll operate, integrate and optimize security tooling, drive vulnerability management and ensure secure CI/CD delivery across our SaaS platforms and services.