Senior Security Engineer

Austroads; Sydney; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible working arrangements

Hybrid work (home + office)

5 extra days personal leave per year

$500 wellbeing allowance annually

Parental leave

EAP for employees and immediate family

LinkedIn Learning access

Job summary

Austroads is seeking a Senior Security Engineer to strengthen our security posture by implementing cloud-native and third-party security solutions, supporting operational teams, and ensuring that technical controls are effective, scalable, and aligned with business and compliance requirements.

You will design and manage security controls in Azure and AWS, deploy XDR and CSPM tools, and collaborate with risk and compliance teams to support incident response and regulatory initiatives.

Qualifications

• Significant experience in cybersecurity engineering, with strong hands-on experience in Azure and AWS.
• Proven experience implementing and managing security tools and platforms.
• Strong understanding of cloud-native security controls, identity and access management, and infrastructure hardening.
• Familiarity with security frameworks such as ISO 27001, NIST, CIS and ACSC Essential Eight.

Responsibilities

• Designing, implementing, and managing security controls in Azure and AWS environments.
• Deploying and maintaining security tools such as XDR, CSPM, and vulnerability scanners.
• Collaborating with security operations, risk and compliance teams to support incident response.

Skills

Azure

AWS

Security tooling

Cloud security

Tools

XDR

CSPM

Vulnerability scanners

Zero Trust

Job description

The Opportunity

Austroads is seeking a Senior Security Engineer to play a key role in strengthening Austroads security posture by implementing cloud-native and third-party security solutions, supporting operational teams, and ensuring that technical controls are effective, scalable, and aligned with business and compliance requirements.

Responsibilities

Cloud Security Engineering

• Designing, implementing, and managing security controls in Azure and AWS environments, such as IAM, network security, logging, and monitoring.
• Ensuring cloud configurations align with best practices and compliance frameworks (e.g. CIS, Essential Eight, ISO 27001).
• Supporting application and infrastructure teams with secure architecture and deployment guidance.

Security Controls Implementation and Support

• Deploying and maintaining technical security tools such as XDR, Zero Trust, vulnerability scanners, and cloud security posture management (CSPM) platforms.
• Implementing and maintaining endpoint, network, and identity security controls across the organisation.
• Integrating security tools and controls with existing infrastructure and ensure effective alerting, logging, and reporting.
• Troubleshooting and resolving issues related to security tooling and configurations.
• Conducting configuration reviews and hardening of systems, applications, and cloud services.
• Supporting technical assurance activities including penetration testing and remediation tracking.

Operational Support

• Collaborating with security operations, risk and compliance teams to support incident response, forensic investigations, risk assessments, and compliance initiatives.
• Provide technical expertise and backfill support during peak operational periods or resource gaps.
• Identifying opportunities to enhance security tooling, automation, and control effectiveness.
• Staying current with emerging threats, technologies, and best practices in cloud and enterprise security.
• Supporting the automation of security processes.

Supporting the Information Security Team

• Collaborating with technology and business teams to achieve information security outcomes.
• Contributing to continuous improvement, identifying ways to enhance value for our members and the public
• Maintaining Quality Systems processes and procedures associated with the function
• Other duties as directed

The full position description can be found at www.austroads.gov.au/careers.

About You

• Significant experience in cybersecurity engineering, with strong hands‑on experience in Azure and AWS.
• Proven experience implementing and managing security tools and platforms.
• Strong understanding of cloud-native security controls, identity and access management, and infrastructure hardening.
• Familiarity with security frameworks such as ISO 27001, NIST, CIS and ACSC Essential Eight.

Desirable

• Certifications such as CISSP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or equivalent.
• Experience with scripting or automation (e.g., PowerShell, Python, Terraform).
• Exposure to container security, CI/CD pipelines, and DevSecOps practices.
• Exposure to regulatory compliance requirements and technical audit support.

Employee Benefits

Austroads has been recognised as a 2025 5‑Star Employer of Choice by HRD Magazine and one of The Australian’s Best Places to Work 2025.

Working With Us Means Access To

• Flexible working arrangements and hybrid work (home + office)
• Extra 5 days personal leave per financial year
• $500 wellbeing allowance annually
• Additional paid parental leave
• EAP access for employees and immediate family
• Subsidised further education and development opportunities
• LinkedIn Learning subscription for ongoing professional growth

About Austroads

Austroads is the collective of Australian and New Zealand transport agencies. We provide practical, impartial advice, tools, and services to support safe, reliable, and efficient mobility outcomes. We are a national organisation with staff located in Melbourne, Sydney, Brisbane, and across Australia and New Zealand, including teams from NEVDIS and TCA.

We embrace diversity of identity, thought, and experience, and strive for a genuinely inclusive workplace.

The successful candidate will be required to undergo a National Police Check.