Senior Security Cloud Engineer

Westpac Group; Sydney; Hybrid; AUD 140,000 - 210,000; Full time

Benefits offered by this job

Flexible work arrangements

Leave options: Culture, Lifestyle and

Learning and development opportunities

Volunteer opportunities

Support for veterans and diverse staff

Job summary

Westpac Group is seeking a Senior Engineer, Security Controls Assessment to hands‑on design, build and validate automated security controls across GCP and AWS. You will embed IaC and PaC guardrails and lead CNAPP adoption with Wiz, while integrating controls into CI/CD pipelines.

You’ll partner with Cloud Platform and Engineering teams to strengthen secure cloud, IaC and policy standards, and drive security by design in a regulated financial technology environment.

Qualifications

• Strong cloud security engineering across GCP and AWS, with GCP preferred.
• Hands-on IaC and PaC, especially Terraform.
• DevSecOps experience: embed security in CI/CD flows with GitHub Enterprise, Harness.io.
• Experience with Wiz/CNAPP and securing Kubernetes (GKE/EKS).
• Strong Python automation and evidence collection for security controls.
• Familiar with CIS, NIST and APRA CPS 234 security frameworks.

Responsibilities

• Design, build and maintain automated security controls across GCP/AWS (IAM, network, encryption, monitoring, Kubernetes).
• Develop IaC and PaC using Terraform, OPA/Rego, Sentinel and policy governance.
• Lead Wiz rollout and integration across identity, security ops, ticketing and engineering.
• Embed automated scanning and policy controls into CI/CD pipelines (IaC, secrets, containers).
• Build continuous controls monitoring and automated evidence collection per CIS/NIST/APRA 234.
• Collaborate with Cloud Platform and Engineering to enforce Security by Design.

Skills

Cloud security

IaC (Terraform)

PaC (Policy as Code)

DevSecOps

CNAPP Wiz

Kubernetes security

Python automation

Security frameworks

Tools

Terraform

OPA/Rego

Sentinel

GCP Org Policies

AWS SCPs

GitHub Enterprise

Harness.io

Wiz

GKE

EKS

Job description

The Security Controls Assessment team sits within the Information Security Group and supports all brands in the Westpac Group. The team provides engineering led assurance that security controls are designed, implemented and operating effectively, with a growing focus on cloud and continuous, code-based control validation.

What’s the Role:

The Senior Engineer, Security Controls Assessment is a hands‑on technical specialist, responsible for engineering, automating and assessing the security controls that protect the Westpac Group's cloud platforms, with a primary focus on Google Cloud Platform (GCP) and Amazon Web Services (AWS).

This role builds Infrastructure as Code (IaC) and Policy as Code (PaC) guardrails, leads the enterprise rollout of Cloud Native Application Protection Platform (CNAPP) capability such as Wiz, and embeds automated controls into engineering pipelines within a complex and regulated technology environment

• Design, build and maintain automated security controls across GCP and AWS, covering IAM, network security, encryption, monitoring and Kubernetes security.
• Develop Infrastructure as Code and Policy as Code using technologies such as Terraform, OPA/Rego, Sentinel, GCP Organization Policies and AWS SCPs.
• Lead the rollout and adoption of Wiz, integrating cloud security capabilities across identity, security operations, ticketing and engineering environments.
• Embed automated security scanning and policy controls into CI/CD pipelines, including IaC, secrets and container image scanning using GitHub Enterprise, Harness.io and Wiz Code.
• Build continuous controls monitoring and automated evidence collection using Python, supporting security frameworks including CIS Benchmarks, NIST CSF and APRA CPS 234.
• Partner with Cloud Platform and Engineering teams to drive Security by Design, remediate cloud security risks, apply AI-led engineering practices and strengthen secure cloud, IaC and Policy as Code standards.

What do I need?

• Strong cloud security engineering experience across GCP and/or AWS, with GCP highly desirable.
• Hands‑on experience with Infrastructure as Code and Policy as Code, particularly Terraform.
• Strong DevSecOps experience, embedding security controls and scanning into CI/CD pipelines using GitHub Enterprise, Harness.io or similar tooling.
• Experience with cloud security platforms such as Wiz/CNAPP and securing Kubernetes environments including GKE and EKS.
• Strong security automation skills using Python, including continuous controls monitoring and automated security processes.
• Solid understanding of cloud security controls and frameworks such as CIS, NIST and APRA CPS 234, with the ability to engage and influence technical and business stakeholders.

We’re obsessed with becoming our customers' #1 banking partner for life and we’re looking for people who are passionate about helping us achieve that goal. In return, we’re committed to making Westpac the best place to work in the country. Here are just a few of the ways we’re already doing that:

• Special offers on banking products and discounts from top brands, including generous employee only mortgage rates!
• Flexible work arrangements to help you achieve a greater work/life balance, and a variety of leave options including Culture, Lifestyle and Wellbeing leave.
• Tailored learning and development opportunities to help your grow your career within the bank.
• Lots of opportunities to ‘give back’ to the Community by getting involved in our many volunteering initiatives.
  

We’re all about creating a supportive and inclusive community. We welcome everyone no matter your age, gender, background, or abilities. We also provide additional support to welcome our veterans, Indigenous Australians and neurodiverse community.

If you need any adjustments during the recruitment process, you can find out more information and additional contact details by visiting the "People with Disability and/or needing Accessibility Requirements"page on ourwebsite.