Senior Security Engineer

Austroads; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Flexible/hybrid work

5 extra personal days

Wellbeing allowance

Parental leave

EAP access

Education & development

LinkedIn Learning

Job summary

Austroads is seeking a Senior Security Engineer to strengthen cloud security posture across Azure and AWS, implementing robust security controls and tooling. You will support operational teams, drive secure architecture, and align controls with CIS, Essential Eight and ISO 27001.

The role requires hands-on experience with cloud-native security, IAM, tooling, and automation, with hybrid work options and a path to contribute to security assurance and compliance initiatives.

Qualifications

• Significant cybersecurity engineering experience with hands-on Azure and AWS.
• Experience implementing and managing security tools and platforms.
• Strong understanding of cloud-native security controls, IAM, and infrastructure hardening.

Responsibilities

• Design, implement, and manage security controls in Azure and AWS.
• Deploy and maintain security tools like XDR, CSPM, and Zero Trust.
• Support incident response, risk assessments, and compliance initiatives.
• Assist with secure architecture guidance for applications and infrastructure.
• Contribute to security tooling automation and ongoing hardening efforts.

Skills

Cloud security engineering

Azure and AWS security

Security tooling & platforms

Scripting & automation

CI/CD / DevSecOps

Regulatory compliance knowledge

Education

CISSP

AWS Certified Security - Specialty

Microsoft Certified: Azure Security Engineer Associate

Tools

Terraform

PowerShell

Python

Job description

Austroads is seeking a Senior Security Engineer to play a key role in strengthening Austroads’ security posture by implementing cloud-native and third-party security solutions, supporting operational teams, and ensuring that technical controls are effective, scalable, and aligned with business and compliance requirements.

Responsibilities

This role is responsible for the following:

Cloud Security Engineering

• Designing, implementing, and managing security controls in Azure and AWS environments, such as IAM, network security, logging, and monitoring.
• Ensuring cloud configurations align with best practices and compliance frameworks (e.g. CIS, Essential Eight, ISO 27001).
• Supporting application and infrastructure teams with secure architecture and deployment guidance.

Security Controls Implementation and Support

• Deploying and maintaining technical security tools such as XDR, Zero Trust, vulnerability scanners, and cloud security posture management (CSPM) platforms.
• Implementing and maintaining endpoint, network, and identity security controls across the organisation.
• Integrating security tools and controls with existing infrastructure and ensure effective alerting, logging, and reporting.
• Troubleshooting and resolving issues related to security tooling and configurations.
• Conducting configuration reviews and hardening of systems, applications, and cloud services.
• Supporting technical assurance activities including penetration testing and remediation tracking.

Operational Support

• Collaborating with security operations, risk and compliance teams to support incident response, forensic investigations, risk assessments, and compliance initiatives.
• Provide technical expertise and backfill support during peak operational periods or resource gaps.
• Identifying opportunities to enhance security tooling, automation, and control effectiveness.
• Staying current with emerging threats, technologies, and best practices in cloud and enterprise security.
• Supporting the automation of security processes.

Supporting the Information Security Team

• Collaborating with technology and business teams to achieve information security outcomes.
• Contributing to continuous improvement, identifying ways to enhance value for our members and the public
• Maintaining Quality Systems processes and procedures associated with the function
• Other duties as directed

The full position description can be found at www.austroads.gov.au/careers.

About You

The successful candidate will demonstrate:

• Significant experience in cybersecurity engineering, with strong hands-on experience in Azure and AWS.
• Proven experience implementing and managing security tools and platforms.
• Strong understanding of cloud-native security controls, identity and access management, and infrastructure hardening.
• Familiarity with security frameworks such as ISO 27001, NIST, CIS and ACSC Essential Eight.
• Certifications such as CISSP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or equivalent.
• Experience with scripting or automation (e.g., PowerShell, Python, Terraform).
• Exposure to container security, CI/CD pipelines, and DevSecOps practices.
• Exposure to regulatory compliance requirements and technical audit support.

Employee Benefits

Austroads has been recognised as a 2025 5-Star Employer of Choice by HRD Magazine and one of The Australian’s Best Places to Work 2025.

Working with us means access to:

• Flexible working arrangements and hybrid work (home + office)
• Extra 5 days personal leave per financial year
• $500 wellbeing allowance annually
• Additional paid parental leave
• EAP access for employees and immediate family
• Subsidised further education and development opportunities
• LinkedIn Learning subscription for ongoing professional growth

About Austroads

Austroads is the collective of Australian and New Zealand transport agencies. We provide practical, impartial advice, tools, and services to support safe, reliable, and efficient mobility outcomes. We are a national organisation with staff located in Melbourne, Sydney, Brisbane, and across Australia and New Zealand, including teams from NEVDIS and TCA.

We embrace diversity of identity, thought, and experience, and strive for a genuinely inclusive workplace.

The successful candidate will be required to undergo a National Police Check.