Senior Cloud Security Architect & Risk Advisor

The Missing Link; Melbourne; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

The Missing Link is seeking a Principal Security Engineer / Cyber Security Advisor for a 12-month hybrid engagement in Melbourne. You will lead security architecture reviews, threat modelling, and risk assessments across AWS and GCP, embedding secure-by-design principles into DevSecOps pipelines.

You will mentor security teams, advise on IAM, SSO, and security controls aligned with APRA CPS 234, CPS 230, ISO 27001 and the Privacy Act, in a highly regulated financial services context.

Qualifications

• Senior-level cyber security engineering or security architecture experience.
• Strong AWS and/or GCP cloud security capability.
• Experience with threat modelling, risk assessments and security controls.
• Knowledge across IAM, AppSec, network security and DevSecOps.
• Experience with CI/CD security, SAST/DAST/SCA and security automation.

Responsibilities

• Lead security architecture reviews and threat modelling.
• Conduct comprehensive security risk assessments.
• Design secure architecture patterns and cloud security standards.
• Provide security guidance across AWS and/or GCP.
• Embed security controls into DevSecOps/CI/CD environments.
• Advise across IAM, SSO, PAM and federated identity.
• Develop risk-based security controls and manage exceptions.
• Partner with engineering, architecture, risk and stakeholders.
• Ensure alignment with regulatory and security frameworks.

Skills

Security architecture

Threat modelling

Cloud security (AWS/GCP)

DevSecOps

IAM / SSO / PAM

CI/CD security

SAST / DAST / SCA

Terraform / IaC

Docker / Kubernetes

Entra ID / Okta

Education

Bachelor's degree in CS or related field

Tools

Terraform

Docker

Kubernetes

Okta

Microsoft Entra ID

Job description

The Missing Link is seeking a Principal Security Engineer / Cyber Security Advisor for a 12-month hybrid engagement in Melbourne. You will lead security architecture reviews, threat modelling, and risk assessments across AWS and GCP, embedding secure-by-design principles into DevSecOps pipelines.

You will mentor security teams, advise on IAM, SSO, and security controls aligned with APRA CPS 234, CPS 230, ISO 27001 and the Privacy Act, in a highly regulated financial services context.