Senior Security Engineer - App, Cloud & IR (Remote AU)

DISCO; Sydney; Remote; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Remote work

Laptop provided

Internet allowance

Learning & development allowance

Job summary

DISCO is hiring a Security Engineer to own end-to-end security across our SaaS platform. You will influence security design, perform threat modelling, and drive remediation in collaboration with engineering, product, legal and leadership from a remote Australia base.

You will lead secure architecture reviews, implement detection, incident response, and SOC2 compliance activities while mentoring engineers and promoting a security-first culture across the company.

Qualifications

• 7+ years in engineering with 5+ years in product or security engineering.
• Hands-on experience in application and security engineering.
• Experience with threat hunting, threat intelligence, or red team activities.
• Strong Python/Django security knowledge and AWS security practices.

Responsibilities

• Lead security engineering for the Python/Django/React stack with code reviews and threat modelling.
• Coordinate static analysis, dependency scanning, and CI secret scanning; triage findings.
• Drive penetration testing and remediation with internal and third-party testers.
• Define secure coding standards and provide pragmatic guidance to engineers.
• Oversee IAM, MFA, access reviews, and secure staff platform access.
• Collaborate to secure AWS environment, container security, and CI/CD integrity.
• Build detection capabilities and manage security incident response and runbooks.
• Contribute to SOC2 compliance and risk assessments; communicate risk to leadership.
• Define security roadmap and mentor engineers; promote a security-first culture.

Skills

Security engineering

Python/Django

AWS security

Incident response

Threat hunting

SOC2/compliance

Risk communication

Remote work

Job description

DISCO is hiring a Security Engineer to own end-to-end security across our SaaS platform. You will influence security design, perform threat modelling, and drive remediation in collaboration with engineering, product, legal and leadership from a remote Australia base.

You will lead secure architecture reviews, implement detection, incident response, and SOC2 compliance activities while mentoring engineers and promoting a security-first culture across the company.