Senior Cloud & App Security Engineer - DevSecOps Lead

telstra; Australia; Hybrid; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Work-life integration

Parental leave (16 weeks)

Professional development program

Telstra mobile plan

Device allowance

Purchased Annual Leave

Discounted Telstra products

Job summary

Telstra is seeking an experienced Senior Security Engineer to lead cloud and application security initiatives. You will design, implement, and operationalise security capabilities across cloud-native platforms, collaborating with engineering teams and product owners to enable secure-by-design development at scale.

The role focuses on CI/CD security tooling, including GitLab, Wiz, and Code, plus SAST and SCA integration, mentoring engineers, and driving strategic security programmes within

Qualifications

• Deep Cloud & Application Security expertise.
• Experience securing cloud-native environments (AWS/Azure/Kubernetes).
• Hands-on with security tooling in CI/CD pipelines (GitLab, SAST, SCA).
• Software engineering or automation background with scripting skills.

Responsibilities

• Lead the design and implementation of cloud and application security capabilities across Telstra platforms.
• Translate security requirements into detailed design patterns.
• Drive deployment and integration of security tooling within CI/CD pipelines (GitLab, Wiz, SAST, SCA).
• Automate security processes across development and production environments.
• Partner with engineering teams to embed security controls into cloud-native solutions.
• Provide technical leadership, mentorship, and capability uplift.
• Communicate risks, requirements and outcomes to stakeholders.

Skills

Cloud security

Automation

Scripting

DevSecOps

Stakeholder engagement

Kubernetes

Security tooling

CI/CD

Tools

GitLab

Wiz

Wiz Code

SAST

SCA

Kubernetes

Job description

Telstra is seeking an experienced Senior Security Engineer to lead cloud and application security initiatives. You will design, implement, and operationalise security capabilities across cloud-native platforms, collaborating with engineering teams and product owners to enable secure-by-design development at scale.

The role focuses on CI/CD security tooling, including GitLab, Wiz, and Code, plus SAST and SCA integration, mentoring engineers, and driving strategic security programmes within