Senior Security Analyst

Paxus; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

Paxus is seeking a Senior Cyber Security Governance & DevSecOps Engineer to strengthen security across enterprise application development environments. The role emphasizes governance, risk, and compliance within CI/CD pipelines and hands-on DevSecOps practices.

You will design automated governance controls and guide teams on vulnerability management and risk mitigation, collaborating with security, architecture, and engineering stakeholders to uphold SSDLC standards.

Qualifications

• 10+ years of experience in Cyber Security.
• 5+ years in Cyber Security Engineering, AppSec, or DevSecOps with a strong focus on Governance, Risk, and Compliance (GRC).
• Proven experience designing and implementing automated governance and quality controls within enterprise CI/CD pipelines.
• Deep understanding of SSDLC, risk assessment and mitigation.
• Exceptional written communication for security instructions, standards, and risk reports.

Responsibilities

• Design, implement, and maintain security governance controls within enterprise CI/CD environments.
• Develop and enforce automated quality gates across platforms such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, Harness, Docker, and JFrog.
• Lead the assessment, evaluation, and management of application security risks and vulnerabilities.
• Facilitate risk acceptance and exemption processes, ensuring governance approvals are in place.
• Produce high-quality technical documentation, including security instructions, architectural handovers, governance standards, and risk assessment reports.
• Collaborate with development, engineering, architecture, and security teams to embed DevSecOps best practices.
• Monitor compliance with security policies, standards, and regulatory requirements.
• Provide expert advice on vulnerability management, risk scoring methodologies, and remediation strategies.

Skills

Cyber Security

DevSecOps

GRC

Threat & Vulnerability

Tools

GitHub Actions

Jenkins

Docker

JFrog

Job description

Senior Cyber Security Governance & DevSecOps Engineer

Candidates must have full working rights

We are seeking an experienced Senior Cyber Security Analyst - AI SDLC to play a critical role in strengthening security controls, risk management, and governance across enterprise application development environments.

As a key member of the Cyber Security team, you will drive secure-by-design practices, establish automated governance controls within CI/CD pipelines, and provide expert guidance on application security risks and compliance requirements.

Key Responsibilities

• Design, implement, and maintain security governance controls within enterprise CI/CD environments.
• Develop and enforce automated quality gates across platforms such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, Harness, Docker, and JFrog.
• Lead the assessment, evaluation, and management of application security risks and vulnerabilities.
• Facilitate risk acceptance and exemption processes, ensuring appropriate governance and stakeholder approvals.
• Produce high-quality technical documentation, including security instructions, architectural handovers, governance standards, and risk assessment reports.
• Collaborate with development, engineering, architecture, and security teams to embed DevSecOps best practices.
• Monitor compliance with security policies, standards, and regulatory requirements.
• Provide expert advice on vulnerability management, risk scoring methodologies, and remediation strategies.

About You

To be successful in this role, you will have:

10+ years of experience in Cyber Security.

5+ years of hands‑on experience in Cyber Security Engineering, Application Security (AppSec), or DevSecOps, with a strong focus on Governance, Risk, and Compliance (GRC).

Proven experience designing and implementing automated governance and quality controls within enterprise CI/CD pipelines.

Strong technical expertise across modern DevSecOps tooling, including:

• GitHub Actions
• Jenkins
• Docker
• JFrog

Deep understanding of:

• Application security vulnerabilities
• Secure Software Development Lifecycle (SSDLC)
• Risk assessment and mitigation
• Governance and exemption approval frameworks

Exceptional written communication skills with the ability to develop:

• Technical instructions
• Security standards
• Risk and compliance reports

Excellent stakeholder engagement and communication skills across technical and business audiences.

Why Join Us?

• Work on large-scale enterprise security transformation initiatives.
• Influence security governance practices across critical technology platforms.
• Collaborate with highly skilled cyber security and engineering professionals.
• Competitive salary and benefits package.
• Flexible and supportive working environment.