Senior DevSecOps Engineer

TheDriveGroup; Sydney; Hybrid; AUD 148,000 - 221,000; Full time

Job summary

TheDriveGroup is seeking a Senior Cyber Security Analyst to lead a DevSecOps security uplift for a major Australian organisation. You will work with security, engineering and infrastructure teams to strengthen CI/CD controls, manage application security risks and improve governance throughout the software development lifecycle.

Key responsibilities include designing automated security gates, managing vulnerabilities and risk exemptions, and embedding security into development workflows.

Qualifications

• Experience in DevSecOps, application security or cyber security engineering.
• Hands-on experience with CI/CD platforms (GitHub Actions, Jenkins, GitLab or Azure DevOps).
• Experience implementing automated security controls and CI/CD pipeline gates.
• Strong understanding of application vulnerabilities, CVSS and risk management.

Responsibilities

• Design, implement and test automated security gates within CI/CD pipelines.
• Manage security vulnerabilities, risk exemptions and risk acceptance processes.
• Embed security controls into development workflows with engineering teams.
• Manage security assessments, compliance requirements and risk tracking (OneTrust).
• Support security integration across cloud infrastructure and IaC.
• Develop technical documentation and security procedures.

Skills

DevSecOps

App Security

Vulnerability management

Security governance

Communication

CI/CD security

OneTrust

Tools

GitHub Actions

Jenkins

GitLab

Azure DevOps

OneTrust

Job description

Senior Cyber Security Analyst – DevSecOps | Contract

Location: Sydney – Hybrid

Contract: Immediate start until June 2027, with potential extension

We're looking for an experienced Senior Cyber Security Analyst to support a major DevSecOps security uplift within a large Australian organisation.

You’ll work closely with security, engineering and infrastructure teams to strengthen security controls across CI/CD pipelines, manage application security risks and improve security governance throughout the software development lifecycle.

Key Responsibilities

• Design, implement and test automated security gates within CI/CD pipelines.
• Manage security vulnerabilities, risk exemptions and risk acceptance processes.
• Work with engineering teams to embed security controls into development workflows.
• Manage security assessments, compliance requirements and risk tracking within OneTrust.
• Support security integration across cloud infrastructure and Infrastructure as Code (IaC).
• Develop technical documentation, security procedures and operational handover processes.

What We’re Looking For

• Strong background in Application Security, DevSecOps or Cyber Security Engineering.
• Hands‑on experience with CI/CD platforms such as GitHub Actions, Jenkins, GitLab or Azure DevOps.
• Experience implementing automated security controls and pipeline gates.
• Strong understanding of application vulnerabilities, CVSS and security risk management.
• Experience with security governance, compliance and risk exemptions.
• Strong communication skills and experience working with development and infrastructure teams.
• OneTrust experience would be highly regarded.