Senior Security Architect & Risk Strategy Leader

XPT Software Australia; Melbourne; On-site; AUD 180,000 - 260,000; Full time

Job summary

XPT Software Australia is seeking a Principal Security Engineer (Generalist) to lead security engineering, architecture, and risk governance within the Cybersecurity Advisory and Consulting COE.

This senior role requires a broad, holistic view across cloud security, application security, IAM and threat modeling, with a focus on risk-based control design and secure-by-default patterns to support blended product and platform teams while aligning with APRA CPS 234/230 and NIST CSF.

Qualifications

• Senior leadership in security engineering and risk governance.
• Experience across cloud and hybrid security architectures.
• Ability to conduct comprehensive risk assessments and design risk-based controls.

Responsibilities

• Lead secure-by-default patterns and blueprints (Zero Trust) for rapid secure engineering across product teams.
• Define and govern secure landing zones and network security controls across multi-cloud environments (AWS, GCP).
• Establish security guardrails and secure usage patterns for GenAI/AI tools and SaaS integrations.
• Collaborate with DevSecOps and Platform Engineering to embed automated security checks into CI/CD pipelines.

Skills

Cloud security

Application security

Identity & access management

Threat modeling

Risk management

Governance

SAST

DAST

SCA

Tools

SAST

DAST

SCA

Job description

XPT Software Australia is seeking a Principal Security Engineer (Generalist) to lead security engineering, architecture, and risk governance within the Cybersecurity Advisory and Consulting COE.

This senior role requires a broad, holistic view across cloud security, application security, IAM and threat modeling, with a focus on risk-based control design and secure-by-default patterns to support blended product and platform teams while aligning with APRA CPS 234/230 and NIST CSF.