Senior Security Engineer

Davidson; City of Melbourne; On-site; AUD 100,000 - 140,000; Full time

Job summary

A leading energy sector company is looking for a Senior Security Engineer to uplift secure software development practices. This role involves embedding security into CI/CD pipelines, identifying vulnerabilities, and applying offensive security techniques. Candidates should have proven experience in penetration testing, strong knowledge of CI/CD security controls, and hands-on experience with security tooling. The position is crucial for integrating security practices within development and delivery pipelines, contributing to the organisation's digital transformation efforts.

Qualifications

• Proven experience in penetration testing and/or red teaming across web, mobile, APIs, and enterprise environments.
• Strong capability in identifying and exploiting vulnerabilities, with remediation strategies.
• Hands-on experience with security tooling and vulnerability management.

Responsibilities

• Embed security into CI/CD pipelines and perform hands-on testing.
• Apply offensive security techniques like penetration testing to uncover weaknesses.
• Work with engineering teams to integrate security tooling and strengthen practices.

Skills

Penetration testing

Vulnerability management

Scripting/automation

CI/CD security controls

DevSecOps principles

Tools

SAST

DAST

SCA

Azure

Job description

About the Company

This organisation is a leading player in the energy sector, focused on delivering reliable, secure, and future-ready technology solutions. With a strong emphasis on innovation and resilience, they are investing heavily in cyber security and modern engineering practices to support critical infrastructure and digital transformation initiatives.

About the Role

This opportunity is for a Senior Security Engineer to play a key role in uplifting secure software development practices across a complex technology environment.

You will focus on embedding security into CI/CD pipelines and validating the effectiveness of security controls through hands-on testing. This includes working across application, cloud, and enterprise environments to identify vulnerabilities early and drive improvements through practical, engineering-led outcomes.

A key part of the role is applying offensive security techniques, such as penetration testing and threat modelling - to uncover weaknesses and translate findings into actionable improvements within development and delivery pipelines. You'll also work closely with engineering teams to integrate security tooling (SAST, DAST, SCA) and strengthen DevSecOps practices across the organisation.


About You

You are a highly technical Security Engineer with strong, recent hands-on experience in security testing and validation.

You bring:

• Proven experience in penetration testing and/or red teaming across web, mobile, APIs, and enterprise environments
• Strong practical capability in identifying and exploiting vulnerabilities, and translating findings into remediation strategies
• Deep understanding of secure SDLC, CI/CD security controls, and DevSecOps principles
• Hands-on experience with security tooling (SAST/DAST/SCA) and vulnerability management
• Scripting/automation skills and experience working in cloud environments (ideally Azure)
• The ability to clearly communicate technical findings and influence engineering outcomes
• Backgrounds with strong offensive security focus and experience in regulated or complex environments will be highly regarded.

Please apply with current resume in Microsoft Word format only (.doc or .docx). If you would like to have a confidential discussion, please contact Dylan Tasker on [e-mail], quoting reference JN -032026-42776. Want to know more about Davidson? Visit us at www.davidsonwp.com