Senior DevSecOps Engineer: Secure Cloud Pipelines

Carsales.com; City of Melbourne; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Paid parental leave

Flexible working

Wellbeing programs

Hackathons

Job summary

carsales is seeking a Senior DevSecOps Engineer to bridge software development and security. You will design, implement, and mature security automation across complex cloud environments, with autonomy to influence the engineering roadmap.

You’ll embed security into AWS-based CI/CD pipelines, standardize practices with infrastructure-as-code, and contribute to incident response while enjoying a hybrid work model and flexible arrangements.

Qualifications

• Demonstrated experience in software engineering, platform engineering and security engineering.
• Experience implementing end-to-end orchestration and secure patterns in AWS.
• Experience designing and maintaining CI/CD gates across the build, release and run phases. Exposure to secure dependency management best practices.
• Hands-on practical use of AI for security and curiosity for novel threats.
• Team player with ability to influence across technical teams.

Responsibilities

• Embed security automation into infrastructure and CI/CD pipelines.
• Shift security left and empower engineering teams with secure components.
• Standardize security practice through Infrastructure-as-code in AWS.
• Secure CI/CD pipelines and deployment practices.
• Automate vulnerability management and secure dependencies.
• Build observability capabilities on agentic systems using OTEL.
• Contribute to incident response efforts.

Skills

Security engineering

AWS experience

CI/CD pipelines

IaC (IaC)

Vuln remediation

AI for security

Team player

Tools

OTEL

Job description

carsales is seeking a Senior DevSecOps Engineer to bridge software development and security. You will design, implement, and mature security automation across complex cloud environments, with autonomy to influence the engineering roadmap.

You’ll embed security into AWS-based CI/CD pipelines, standardize practices with infrastructure-as-code, and contribute to incident response while enjoying a hybrid work model and flexible arrangements.