Senior DevSecOps Engineer: Secure Cloud & CI/CD Leader

carsales; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Best Workplaces Australia

Family friendly workplace

Flexible working

Parental leave 24 weeks

Job summary

carsales in Sydney seeks a Senior DevSecOps Engineer to embed security automation into our infrastructure and CI/CD pipelines, securing build and run. This role sits at the intersection of software development and security, giving you autonomy and direct influence on the engineering roadmap.

You'll standardize security practices with Infrastructure-as-code in AWS, secure deployments, automate vulnerability management, and contribute to incident response, while collaborating with a

Qualifications

• Experience in software and platform engineering with a security focus.
• End-to-end orchestration and secure patterns in AWS.
• CICD gates design across the build, release and run phases.
• Experience with vulnerability remediation at run time and AI for security.

Responsibilities

• Embed security automation into infrastructure and CI/CD pipelines to secure our build and run.
• Shift security left and empower engineering teams with secure components and patterns.
• Standardize security practice through Infrastructure-as-code and services orchestration in AWS.
• Secure CI/CD pipelines and deployment practices.
• Automate Vulnerability Ops and secure dependencies management.
• Build observability and monitoring capabilities on agentic systems with OTEL.
• Contribute to incident response efforts.

Skills

Software engineering

Platform engineering

Security engineering

AWS orchestration

CI/CD gates

Vulnerability remediation

AI for security

Team collaboration

Job description

carsales in Sydney seeks a Senior DevSecOps Engineer to embed security automation into our infrastructure and CI/CD pipelines, securing build and run. This role sits at the intersection of software development and security, giving you autonomy and direct influence on the engineering roadmap.

You'll standardize security practices with Infrastructure-as-code in AWS, secure deployments, automate vulnerability management, and contribute to incident response, while collaborating with a