Senior Security Engineer

Transport Certification Australia Limited; Sydney; Hybrid; AUD 140,000 - 200,000; Full time

Job summary

Austroads is seeking a Senior Security Engineer to strengthen its security posture by deploying cloud-native and third-party security solutions, while supporting operational teams.

You will design and manage security controls in Azure and AWS, align configurations with CIS, Essential Eight, and ISO 27001, and collaborate with risk and compliance groups to drive secure, scalable outcomes.

Qualifications

• Significant experience in cybersecurity engineering with hands-on Azure and AWS.
• Experience implementing and managing security tools and platforms.
• Strong understanding of cloud-native security controls, IAM, and infrastructure hardening.
• Familiarity with ISO 27001, NIST, CIS and ACSC Essential Eight.
• Certifications such as CISSP, AWS Certified Security – Specialty, Azure Security Engineer Associate, or equivalent.
• Experience with scripting/automation (PowerShell, Python, Terraform).
• Exposure to container security, CI/CD pipelines, and DevSecOps practices.
• Exposure to regulatory compliance requirements and technical audit support.

Responsibilities

• Designing, implementing, and managing security controls in Azure and AWS environments (IAM, network security, logging, and monitoring).
• Deploying and maintaining security tools such as XDR, CSPM, and Zero Trust; ensuring alerting, logging, and reporting.
• Supporting incident response, forensics, risk assessments, and compliance initiatives.
• Collaborating with security operations and IT teams to improve tooling, automation, and control effectiveness.
• Staying current with emerging threats and best practices in cloud and enterprise security.

Skills

Azure

AWS

Cybersecurity engineering

Security tooling

Automation scripting

DevSecOps

IAM

Cloud-native security

Container security

Tools

PowerShell

Python

Terraform

Job description

This position is based in the Austroads Sydney or Melbourne office.

The Senior Security Engineer will play a key role in strengthening Austroads’ security posture by implementing cloud-native and third-party security solutions, supporting operational teams, and ensuring that technical controls are effective, scalable, and aligned with business and compliance requirements.

Major responsibilities/accountabilities

The role is responsible for:

• Cloud Security Engineering
  • Designing, implementing, and managing security controls in Azure and AWS environments, such as IAM, network security, logging, and monitoring.
  • Ensuring cloud configurations align with best practices and compliance frameworks (e.g. CIS, Essential Eight, ISO 27001).
  • Supporting application and infrastructure teams with secure architecture and deployment guidance.
• Security Controls Implementation and Support
  • Deploying and maintaining technical security tools such as XDR, Zero Trust, vulnerability scanners, and cloud security posture management (CSPM) platforms.
  • Implementing and maintaining endpoint, network, and identity security controls across the organisation.
  • Integrating security tools and controls with existing infrastructure and ensure effective alerting, logging, and reporting.
  • Troubleshooting and resolving issues related to security tooling and configurations.
  • Conducting configuration reviews and hardening of systems, applications, and cloud services.
  • Supporting technical assurance activities including penetration testing and remediation tracking.
• Operational Support
  • Collaborating with security operations, risk and compliance teams to support incident response, forensic investigations, risk assessments, and compliance initiatives.
  • Provide technical expertise and backfill support during peak operational periods or resource gaps.
  • Identifying opportunities to enhance security tooling, automation, and control
    effectiveness.
  • Staying current with emerging threats, technologies, and best practices in cloud and enterprise security.
  • Supporting the automation of security processes.
• Supporting the Information Security Team
  • Collaborating with technology and business teams to achieve information security outcomes.
  • Contributing to continuous improvement, identifying ways to enhance value for our members and the public
  • Maintaining Quality Systems processes and procedures associated with the function
  • Other duties as directed

Qualifications, knowledge, and experience

The Senior Security Engineer will possess:

• Significant experience in cybersecurity engineering, with strong hands-on experience in Azure and AWS.
• Proven experience implementing and managing security tools and platforms.
• Strong understanding of cloud-native security controls, identity and access management, and infrastructure hardening.
• Familiarity with security frameworks such as ISO 27001, NIST, CIS and ACSC Essential Eight.
• Certifications such as CISSP, AWS Certified Security – Specialty, Microsoft Certified: Azure Security Engineer Associate, or equivalent.
• Experience with scripting or automation (e.g., PowerShell, Python, Terraform).
• Exposure to container security, CI/CD pipelines, and DevSecOps practices.
• Exposure to regulatory compliance requirements and technical audit support

The incumbent will need to present a professional image and build a strong relationship across the
enterprise. Specifically, the role requires:

• Excellent leadership, initiative, innovativeness and drive, and the ability to work independently to deadlines and within time constraints, to handle tasks with discretion, confidentiality, reliability and flexibility, and to set priorities
• Demonstrated high level organisational and administrative ability.
• Highly developed interpersonal and communication skills, both oral and written, including the ability to deal tactfully and effectively with people at all levels.
• Comfortable working in a fast-paced environment
• A service focused approach
• Sound judgement and problem-solving ability
• Strong networking and teamworking skills
• Strong attention to detail
• Commitment to ongoing professional development and learning
• Professional ethics and integrity
• Comfort working in an environment which is constantly evolving