Senior Cyber Security Analyst - AI SDLC | DevSecOps

Interpro People; Sydney; Hybrid; AUD 166,000 - 185,000; Full time

Job summary

Interpro People is seeking a Senior Cyber Security Analyst to help design and implement automated security gates within DevSecOps pipelines across the software development lifecycle in Sydney's hybrid setting.

The role combines hands-on security engineering with governance, risk and compliance, requiring collaboration with engineering, infrastructure and operations teams to ensure secure, compliant software delivery.

Qualifications

• 10+ years in cyber security with at least 5 in cyber security/application security/DevSecOps.
• Experience implementing automated security gates in enterprise CI/CD environments.
• Familiarity with GitHub Actions, GitLab CI, Jenkins, Azure DevOps, Docker, Harness and JFrog.
• Strong documentation, analytical, organizational and stakeholder management skills.

Responsibilities

• Gather security requirements and design, implement and test automated security gates within CI/CD pipelines.
• Optimise controls to minimise false positives and maintain efficient developer workflows.
• Manage security exemptions, bypass requests and risk acceptances, including mitigating controls and application risk registers.
• Track security assessments and compliance activities in OneTrust, mapping controls and supporting evidence to regulatory and internal requirements.
• Collaborate with infrastructure teams to integrate controls into infrastructure-as-code and cloud landing zones.
• Produce operating procedures, implementation plans and handover documentation to support operational readiness.
• Facilitate stakeholder workshops, assess change impacts and report security risks, metrics and performance to senior leadership.

Skills

Cyber security

DevSecOps

Governance

CI/CD security

Documentation

Stakeholder mgmt

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Docker

Harness

JFrog

Job description

Senior Cyber Security Analyst - AI SDLC | DevSecOps

A large enterprise organisation is currently seeking an experienced Senior Cyber Security Analyst to assist to assist with build, testing, deployment and operations ofsecurity controls into DevSecOps pipelines across the software development lifecycle.

This position combines hands-on implementation with governance, risk and compliance, working closely with engineering, infrastructure and operational teams.

Key Responsibilities:

• Gather security requirements and design, implement and test automated security gates within CI/CD pipelines.
• Optimise controls to minimise false positives and maintain efficient developer workflows.
• Manage security exemptions, bypass requests and risk acceptances, including mitigating controls and application risk registers.
• Track security assessments and compliance activities in OneTrust, mapping controls and supporting evidence to regulatory and internal requirements.
• Collaborate with infrastructure teams to integrate controls into infrastructure-as-code and cloud landing zones.
• Produce operating procedures, implementation plans and handover documentation to support operational readiness.
• Facilitate stakeholder workshops, assess change impacts and report security risks, metrics and performance to senior leadership.

Overview

A large enterprise organisation is currently seeking an experienced Senior Cyber Security Analyst to assist to assist with build, testing, deployment and operations ofsecurity controls into DevSecOps pipelines across the software development lifecycle.

This position combines hands-on implementation with governance, risk and compliance, working closely with engineering, infrastructure and operational teams.

Key Responsibilities:

• Gather security requirements and design, implement and test automated security gates within CI/CD pipelines.
• Optimise controls to minimise false positives and maintain efficient developer workflows.
• Manage security exemptions, bypass requests and risk acceptances, including mitigating controls and application risk registers.
• Track security assessments and compliance activities in OneTrust, mapping controls and supporting evidence to regulatory and internal requirements.
• Collaborate with infrastructure teams to integrate controls into infrastructure-as-code and cloud landing zones.
• Produce operating procedures, implementation plans and handover documentation to support operational readiness.
• Facilitate stakeholder workshops, assess change impacts and report security risks, metrics and performance to senior leadership.

Key Requirements:

• 10+ years of cyber security experience, including at least 5 years in cyber security, application security or DevSecOps engineering, with a strong governance, risk and compliance focus.
• Proven experience implementing automated security or quality gates within enterprise CI/CD environments.
• Familiarity with tools such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, Docker, Harness and JFrog.
• Strong understanding of application vulnerabilities, CVSS risk scoring and formal exemption processes.
• Excellent technical documentation, analytical, organisational and stakeholder management skills.
• Experience delivering technical and process change within large, complex organisations.
• Proficiency in Agile and Waterfall delivery methods.

Contract Rate:

$900-$1,000 per Day (incl. super)

Job Ref:

1264864

Additional information

• Contract until end of June 2027 (with the view to extend)
• Enterprise Project
• Sydney Norwest Location (Hybrid, 3 days onsite)