Senior DevSecOps Engineer: Cloud Security & Identity

Commonwealth Bank Of Australia; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

x15ventures, part of Commonwealth Bank of Australia, is seeking a Senior Security Engineer to design, build and improve security capabilities across its ventures. The role is hands-on with DevSecOps focus, cloud security, identity governance and automation, working with engineers to embed security into delivery pipelines and cloud environments.

You will lead complex security engineering work, mentor peers and help lift security capability across the x15 community, balancing technical solutions

Qualifications

• Strong hands-on security engineering experience.
• Experience designing security controls in modern software delivery pipelines.
• Cloud security experience on AWS and Azure.
• Experience with IaC technologies such as Terraform, CloudFormation or Bicep.
• Experience with CI/CD platforms such as GitHub Actions, Azure DevOps or GitLab CI.
• Experience implementing security testing within delivery pipelines (SAST, SCA, Secrets scanning, container scanning).

Responsibilities

• Embed security controls across the software development lifecycle.
• Design security capabilities in CI/CD pipelines.
• Prioritize material issues and remediate vulnerabilities without delivery friction.
• Develop reusable pipeline components and guardrails.
• Implement policy-as-code and automated compliance checks.
• Contribute to secure coding, threat modelling and security reviews.
• Design and improve security controls across AWS and Azure.
• Review cloud architectures for identity, networking, data and resilience.
• Mentor engineers and contribute to security standards.

Skills

Security engineering

DevSecOps

Cloud security

AWS

Azure

Identity governance

Automation

Python

PowerShell

CI/CD pipelines

Threat modelling

Tools

Terraform

CloudFormation

Bicep

GitHub Actions

Azure DevOps

GitLab CI

Kusto Query Language

Job description

x15ventures, part of Commonwealth Bank of Australia, is seeking a Senior Security Engineer to design, build and improve security capabilities across its ventures. The role is hands-on with DevSecOps focus, cloud security, identity governance and automation, working with engineers to embed security into delivery pipelines and cloud environments.

You will lead complex security engineering work, mentor peers and help lift security capability across the x15 community, balancing technical solutions