Senior Platform Security Engineer - Ai Cloud & Hpc

Firmus; Sydney; On-site; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive salary

Parental leave

Income protection

Company rewards

Salary packaging

Stock purchase plans

Flu shots and health checks

Job summary

Firmus is seeking a Senior Platform Security Engineer to join our AI Cloud HPC program in Australia. You will design, implement and automate security for regional cloud services, ensuring alignment with ISM/PSPF frameworks and government standards.

Lead onboarding and assurance across AWS infrastructure, develop reusable tooling, coordinate with service teams, and respond to security events to sustain operational readiness. Australian citizenship and government clearance eligibility are required.

Qualifications

• Knowledge of industry-based security vulnerabilities and remediation techniques.
• Experience in scripting, programming, and security code reviewing in a common programming language.

Responsibilities

• Lead security onboarding and assurance for region-specific cloud services.
• Engineer and automate security-control validation for cloud services and data-transfer pathways.
• Partner with service teams to translate security requirements into technical baselines and acceptance criteria.
• Develop reusable security tooling and automated evidence collection across AWS environments.
• Investigate security events and participate in on-call rotations to maintain readiness.

Skills

Cloud security

Security tooling

Automation scripting

Incident response

Threat modeling

Job description

Senior Platform Security Engineer AI Cloud HPC

Job Description

G'day! You've found an opportunity that could define your next chapter. Applicants must be Australian citizens and hold or be eligible to obtain an Australian Government Security Clearance with the ability to successfully complete an Organisational Suitability Assessment. More information regarding security clearances can be found at in Melbourne - we offer relocation support for candidates moving other states.

The Mission - Why This Program, Why Now?
You’re joining at the defining moment of one of the most significant technology programs Australia has ever undertaken. This program will build and operate the dedicated cloud giving Australia's national security community and its allies the capability to see more, share more, innovate and act faster than ever before.
The architectural decisions being made now - how we structure networking, implement security controls, and automate at scale - will shape how Australia's national security community operates for the next decade. You won't be inheriting someone else's design choices. You'll be making them.

Key responsibilities

• Lead security onboarding and assurance for region‑specific cloud services, designing scalable mechanisms that ensure the operational readiness of regional AWS infrastructure.
• Engineer and automate security‑control validation for cloud services and data‑transfer pathways, including reviews of technical designs, architectures, code, configurations, documentation and structured data schemas (JSON, JSON Schema, XML, XSD, XSLT, XPath).
• Partner with service teams and customers to translate security requirements into technical baselines, control objectives, implementation patterns and measurable acceptance criteria aligned with Australian security frameworks such as the ISM, PSPF and DSPF.
• Develop reusable security tooling, automated evidence collection and reporting mechanisms that reduce manual effort and improve the consistency of service onboarding, assurance and audit engagements across AWS environments.
• Investigate security events and non‑conformance, determine root causes, implement durable corrective solutions through automation, and participate in the on‑call rotation to support continuous operational readiness.

Basic Qualifications

• Knowledge of industry‑based security vulnerabilities and remediation techniques
• Experience in scripting, programming, and security code reviewing in a common programming language (non‑internship)
• Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non‑internship experience)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• 3+ years of IT Security experience

Preferred Qualifications

• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C+
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Eligibility and Legal

Australian citizenship required. Hold or be eligible to obtain an Australian Government Security Clearance. Baseline security clearance or higher is required.

Benefits

• Competitive salary (including annual reviews)
• Paid parental leave
• Income protection
• Corporate rewards
• Salary packaging/Novated leasing
• Employee stock purchase plans
• Flu shots, skin checks and discounted private health insurance
• Career development: online learning, mentorship and career pathways