Senior Security Engineer - AI SaaS & Trust Lead

Checkbox; Sydney; Hybrid; AUD 180,000 - 260,000; Full time

Benefits offered by this job

Hybrid Sydney office days

Ownership over security program

Learning budget

Flexible leave policy

CBD start-up culture

Job summary

Checkbox is redefining legal operations with an AI-first SaaS platform. This Staff/Principal Security Engineer role sits at the heart of application, cloud and infrastructure security, driving trust for customers and ensuring security is embedded across our products and processes.

You will own security programs including SOC 2, ISO 27001/27017/27018, work with cross-functional teams, and help scale security practices as we grow.

Qualifications

• Expertise in application and infrastructure security across SaaS platforms.
• Experience with security audits and compliance frameworks (SOC 2, ISO 27001/27017/27018).
• Hands-on in security tooling, incident response and secure SDLC.

Responsibilities

• Own security across Checkbox's app and cloud infra, including reviews for new architectures.
• Lead SIEM from detection to response and improve security visibility.
• Drive vulnerability management, triage, patching and remediation.
• Shape AI security guardrails for internal teams and AI-assisted workflows.
• Collaborate with product, eng, platform, IT, and legal to embed security.

Skills

Security engineering

AWS

Kubernetes

SIEM ownership

Threat modeling

Compliance frameworks

GRC tools

Terraform

Go/TypeScript

CI/CD tooling

Education

Bachelor's degree in Computer Science or related field

Tools

SAST

DAST

Vanta/Drata

Terraform/OpenTofu/CloudFormation

Job description

Checkbox is redefining legal operations with an AI-first SaaS platform. This Staff/Principal Security Engineer role sits at the heart of application, cloud and infrastructure security, driving trust for customers and ensuring security is embedded across our products and processes.

You will own security programs including SOC 2, ISO 27001/27017/27018, work with cross-functional teams, and help scale security practices as we grow.