Senior Security Architect & Risk Advisory Leader

XPT Software; Melbourne; On-site; AUD 180,000 - 260,000; Full time

Job summary

XPT Software seeks a Principal Security Engineer (Generalist) to serve as a senior technical authority, bridging deep security engineering, solution architecture, and risk governance. You will drive secure-by-design patterns across multi-cloud environments while guiding risk-based controls and regulatory compliance in a consulting-focused COE.

The role emphasizes design leadership across cloud, application security, identity & access management, and threat modeling, with a focus on enabling

Responsibilities

• Lead the design, implementation and maintenance of secure-by-default patterns and blueprints (Zero Trust reference architectures) across product teams.
• Define and govern secure landing zones, network security controls, and secure configuration standards across hybrid-/multi-cloud environments (AWS and GCP/GCVE).
• Establish security guardrails, risk assessments, and secure usage patterns for emerging technologies including developer environments, GenAI/AI-assisted coding tools, and SaaS marketplace integrations.
• Partner with DevSecOps and Platform Engineering to automate secure entry points and self-service delivery, embedding SAST/DAST/SCA, secrets discovery, and compliance checks into pipelines.
• Lead architectural reviews and threat modeling sessions for high-risk enterprise applications and convert threats into actionable engineering requirements.

Skills

Security architecture

Threat modeling

Zero Trust

Multi-cloud security

DevSecOps collaboration

AI governance

Tools

SAST/DAST/SCA

VPC/Network security controls

Job description

XPT Software seeks a Principal Security Engineer (Generalist) to serve as a senior technical authority, bridging deep security engineering, solution architecture, and risk governance. You will drive secure-by-design patterns across multi-cloud environments while guiding risk-based controls and regulatory compliance in a consulting-focused COE.

The role emphasizes design leadership across cloud, application security, identity & access management, and threat modeling, with a focus on enabling