Senior Security Engineer

linkly; Sydney; On-site; AUD 140,000 - 180,000; Full time

Job summary

Linkly is seeking a Senior Cybersecurity Engineer to lead the new internal penetration testing capability. You will own security validation of product designs and cloud configurations, primarily on Azure, collaborating with engineering and operations to ensure robust risk mitigation and resilient systems.

You’ll establish security guidelines, run routine infrastructure assessments, and build tooling to automate testing.

Qualifications

• 6+ years’ experience as a security engineer, penetration tester or security consultant.
• Deep, detailed knowledge of Microsoft Azure, including cloud-native attack techniques and common misconfigurations.
• Experience with secure cloud architecture, particularly on Azure.
• Experience developing threat models and helping engineering teams reason through different ways to reduce security risk.
• Scripting or programming skills (e.g. Python or PowerShell) to automate testing and build your own tooling.
• Ability to write clear, concise reports covering findings, risks and practical remediation recommendations.
• Strong communication skills, with the ability to explain technical security concepts to both technical and non-technical audiences.

Responsibilities

• Build and run Linkly’s internal penetration testing function, carrying out testing across our cloud infrastructure, products and services.
• Carry out security assessments of new changes to our cloud infrastructure.
• Consult with engineering teams and validate and test that the design and configuration of their products and services are secure and meet security requirements.
• Help set Linkly’s security guidelines and define the security baselines our cloud environments are built and measured against.
• Provide security design review and testing for upcoming initiatives, including our new data product.

Skills

Azure security

Penetration testing

Threat modelling

Python scripting

PowerShell scripting

Security reporting

Communication

Job description

About Linkly

Linkly is a PE-backed, Australian fintech focusing on payment integration solutions. We are a leading provider in ecommerce recurring billing, and our middleware powers over 200,000 terminals and processes over two billion transactions annually. Our applications support over 800 integrations into POS solutions. We have built our reputation through seamless integration of payment terminals and POS systems and are continuing to innovate in creating a terminal and acquirer independent payment solicitor for in-store. Our clients include major banks and retailers such as Woolworths, David Jones, JB Hi-Fi, and Bunnings.

Our goal is to continuously lead the payments industry with new technology delivering value to clients, which who include merchants, banks, acquirers and POS vendors, expanding our presence into other regions.

About the Role

We’re looking for a Senior Cybersecurity Engineer to join our Security team and take ownership of building Linkly’s internal penetration testing capability. This is a brand-new function in the team, so you will be building it from the ground up.

This role requires deep technical cloud security expertise, with Azure as our primary platform. You’ll work closely with our Chief Security Officer, the wider Security team, and our engineering and operations teams to validate that the design and configuration of our products and services meet security requirements. Engineering owns the design; you make sure it holds up.

Within your first 12 months, you’ll have an internal penetration testing function in place and in use, security assessments of cloud infrastructure changes running routinely, and a defined set of security guidelines and baselines for the business.

Key Responsibilities

• Build and run Linkly’s internal penetration testing function, carrying out testing across our cloud infrastructure, products and services.
• Carry out security assessments of new changes to our cloud infrastructure.
• Consult with engineering teams and validate and test that the design and configuration of their products and services are secure and meet security requirements.
• Help set Linkly’s security guidelines and define the security baselines our cloud environments are built and measured against.
• Provide security design review and testing for upcoming initiatives, including our new data product.

What You'll Need

• 6+ years’ experience as a security engineer, penetration tester or security consultant.
• Deep, detailed technical knowledge of Microsoft Azure, including cloud-native attack techniques and common misconfigurations.
• Experience with secure cloud architecture, particularly on Azure.
• Experience developing threat models and helping engineering teams reason through different ways to reduce security risk.
• Scripting or programming skills (e.g. Python or PowerShell) to automate testing and build your own tooling.
• Ability to write clear, concise reports covering findings, risks and practical remediation recommendations.
• Strong communication skills, with the ability to explain technical security concepts to both technical and non-technical audiences.

Nice to Have:

• AWS experience, including secure cloud architecture on AWS.
• Certified Ethical Hacker (CEH) or an equivalent certification.
• Exposure to PCI DSS and the payments industry.

Our Values

• Act Like an Owner: Take full accountability for outcomes and make decisions with the long-term success of Linkly in mind.
• Innovate: Challenge assumptions, champion new ideas and drive meaningful change for customers and the business.
• Deepen Trust: Build confidence through integrity, transparency and consistent delivery with your team, partners and clients.
• Care and Respect: Foster an inclusive, supportive environment where everyone feels valued and empowered to do their best work.