Senior Product Security Engineer – Cloud, AI & Secure SDLC

Creditorwatch; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Fitness First

Daily Fuel

Phone Credits

Wellness Days

Monthly Massages

Fun Stuff

A Great Place to Work

Learn & Grow

Employee Assistance Program

Job summary

CreditorWatch is seeking a Staff Product Security Engineer to shape how security engineering evolves, turning strategy into practical controls across AWS, software supply chain and AI. This senior IC role collaborates with Engineering, Platform and Risk teams to embed secure design patterns and drive secure, scalable security practices.

You will lead cross-functional initiatives, mentor engineers, and contribute to governance for ISO 27001, SOC 2 and regulatory assurances while advancing the

Qualifications

• 6+ years of hands-on security engineering across multiple domains.
• Strong AWS security experience across multi-account architecture and IAM.
• Experience with secure design reviews, threat modelling and SAST/SCA/DAST tooling.
• Security patterns for CI/CD, IaC, containers and build integrity.
• Ability to write production-quality code in Python, Go or TypeScript.
• Knowledge of OAuth/OIDC, SAML and Zero Trust concepts.
• Familiarity with ISO 27001, SOC 2 and OWASP frameworks.

Responsibilities

• Shape security engineering & architecture with standards and guardrails.
• Lead threat modelling, design reviews and risk assessments early in projects.
• Drive automated security controls, detections and evidence across platforms.
• Deliver AWS security controls across account architecture and CSPM.
• Embed security checks into SDLC and CI/CD pipelines with ownership.
• Lead AI security initiatives and develop safe patterns for agentic tooling.
• Mentor engineers and translate risks into actionable recommendations.

Skills

6+ years of hands-on security

Cloud security (AWS)

Application & product security

Software supply chain security

Production-quality code (Python/Go/TS)

Enterprise security & identity

Security fundamentals (cryptography, P

Job description

CreditorWatch is seeking a Staff Product Security Engineer to shape how security engineering evolves, turning strategy into practical controls across AWS, software supply chain and AI. This senior IC role collaborates with Engineering, Platform and Risk teams to embed secure design patterns and drive secure, scalable security practices.

You will lead cross-functional initiatives, mentor engineers, and contribute to governance for ISO 27001, SOC 2 and regulatory assurances while advancing the