Senior Engineer - Security Strategy & Engineering

Bendigobank; City of Melbourne; Hybrid; AUD 140,000 - 200,000; Full time

Benefits offered by this job

Hybrid work model

Head Office Melbourne/Bendigo

Job summary

Bendigo Bank is seeking a Senior Engineer - Security Strategy & Engineering to bridge high-level security architecture with hands-on execution. You will consult with project teams, review designs, and implement security controls to protect the organisation and customers.

The role combines advisory and technical work across application, network, and cloud security, with a focus on threat modelling, secure-by-design practices, and collaboration with delivery squads in a hybrid model based at

Qualifications

• Experience applying STRIDE, MITRE ATT&CK, and OWASP to assess mitigations.
• Strong background in Security by Design and design review of solutions.
• Broad knowledge across application, network and cloud security disciplines.
• Ability to partner with technical and non-technical stakeholders effectively.
• Desirable experience in APRA-regulated financial services or similar regulation.

Responsibilities

• Review complex architectures and designs, embedding proactive security controls from inception.
• Act as security SME, combining advisory work with hands-on technical work.
• Lead threat modelling exercises to identify vulnerabilities early.
• Build, configure and validate security controls and testing regimes across environments.
• Uplift security maturity and advise delivery squads across bank-wide security practices.
• Navigate architectural reviews, problem-solve, and consult with stakeholders across teams.

Skills

STRIDE

MITRE ATT&CK

OWASP

Security by Design

Security architecture

Stakeholder advisory

Cloud security

Job description

We’ve never been ‘just a bank’. Just like you should never be ‘just an employee’. We’re united in our belief that in banking, better can be bigger, and together we’re making it happen.

It starts here. With Bendigo Bank… and you.

About the opportunity

The technology space is evolving, and so are we. At Bendigo Bank we are simplifying our technology function, creating clearer accountabilities aligned with our strategy and customer needs. With a focus on delivering innovative services at scale, we’re creating a future-ready customer experience and high performing culture.

As the Senior Engineer - Security Strategy & Engineering you will step into a pivotal SME role bridging the gap between high-level security architecture and hands-on technical execution. Supporting both our technical and advisory domains, you’ll consult directly with project teams, review and constructively challenge solution designs, and actively engineer and test security controls to keep our organisation and customers safe.

In this role you’ll get to…

• Review complex solution architectures and designs across the bank, embedding robust, proactive security controls right from inception.
• Serve as a trusted security SME who proves that the best advisory work is backed by hands‑on technical expertise.
• Conduct comprehensive threat modelling exercises utilising frameworks such as STRIDE, MITRE ATT&CK, and OWASP to uncover and remediate vulnerabilities early.
• Build, configure, and validate technical security controls and testing regimes across application, network, and multi-cloud environments.
• Play a foundational role in this newly created position, uplifting security maturity, advising diverse delivery squads, and driving modern security practices bank-wide.
• Pivot seamlessly between architectural reviews, technical problem-solving, and stakeholder consulting in a collaborative, fast-paced environment.

What you’ll bring to the role

• Proven track record applying methodologies like STRIDE, MITRE ATT&CK, and OWASP to assess and mitigate technical risk.
• Strong experience in Security by Design, reviewing solution designs, and executing practical security testing.
• Broad, confident technical knowledge spanning application, network, and cloud security disciplines.
• Proven ability to partner with and advise technical and non-technical stakeholders effectively.
• Demonstrated experience within the APRA-regulated financial services sector (or an equivalent highly regulated industry) is highly desirable.

This is a permanent, full-time opportunity, located at our Melbourne or Bendigo Head Office locations.

We offer flexible work options that put our people first, working in a hybrid model with a minimum local Head Office attendance requirement determined by your Leader, to find a rhythm that works best for you and your team. We believe that coming into the office some of the time is the best way to learn, stay connected and collaborate effectively, especially for key activities like team days, 1:1s, and town halls.

We believe a diverse workforce supported by an inclusive culture is central to our success and we actively encourage applications from those who bring diversity of thought to our business.

We support candidate requests for adjustment to accommodate an illness, injury, or disability to equitably participate in the selection process.

Still in two minds?

Research suggests 60% of women and underrepresented groups might stop here, even after getting as far as drafting an application. We believe that diversity makes every team stronger, so even if you don’t tick every box we still want to see your application!