Senior Security Engineer (AppSec)

PRA; Sydney; Hybrid; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Hybrid Sydney CBD office

Job summary

PRA is building a brand-new Security Engineering function in Sydney CBD, offering a hybrid work setup. The role spans both product and enterprise security, reporting to a Principal Product Security Engineer and partnering with Engineering and the wider business.

You will embed security into delivery, run reviews and threat modelling, strengthen the software supply chain, and implement enterprise security tools across IAM, EDR, SSE, DLP, and email security; promoting least privilege and Zero

Qualifications

• Hands-on security across product and enterprise domains.
• Secure code review, threat modelling and vulnerability management in cloud-native/SaaS.
• Experience with AWS security features and IAM.
• Knowledge of SSO, OAuth, OIDC, SAML and conditional access.
• Ability to script in Python or Bash and explain risk to engineers.

Responsibilities

• Embed security into delivery by integrating SAST/SCA and secrets detection into CI/CD pipelines.
• Conduct security reviews, threat modelling and risk assessments; drive remediations.
• Strengthen software supply chain and CI/CD security; enable secure AI/ML adoption.
• Operate enterprise security tools across IAM, EDR, SSE, DLP and email security; apply Zero Trust.
• Improve vulnerability management, detection, alerts, and incident response; support ISO 27001 and SOC 2.

Skills

SAST/SCA tooling

Threat modelling

Vuln management

CI/CD security

Python/Bash scripting

AWS security

IAM/OAuth/SAML

Zero Trust

Tools

SAST tooling

SCA tooling

IAM tools

EDR tooling

DLP tools

Job description

Security Engineer | Application & Enterprise Security | Sydney CBD | Hybrid

Looking for a hands-on security role where you actually run, tune and integrate the tooling, not just buy it?

This is a chance to be one of the first engineers in a brand-new Security Engineering function, working across both product and enterprise security in a business that's gearing up for its next stage of growth.

About the opportunity

• Join a leading Australian data and technology business that helps thousands of companies make smarter commercial decisions
• An established platform with fresh investment behind it and ambitious growth plans ahead
• Be part of a newly established Security Engineering function, with real scope to shape how it operates
• Report to a Principal Product Security Engineer and partner closely with Engineering and the wider business

The Role

• Embed security into delivery: integrate SAST, SCA and secrets detection into CI/CD pipelines with automated, actionable feedback for engineers
• Run security reviews, threat modelling and risk assessments across products and applications, and drive practical remediation
• Strengthen software supply chain and CI/CD infrastructure security, and help engineers adopt AI/ML capabilities securely
• Implement, tune and operate enterprise security tools across IAM, EDR, SSE, DLP and email security, applying least privilege and Zero Trust principles
• Improve vulnerability management, detection, alert workflows and incident response, and support ISO 27001 and SOC 2 compliance

What you'll bring

• Hands-on experience across multiple security domains, with the versatility to work across both product and enterprise security
• Application security experience in cloud-native or SaaS environments: secure code review, threat modelling, SAST/SCA tooling and vulnerability management
• Working knowledge of cloud security, ideally AWS (IAM, networking, Security Hub, Inspector or GuardDuty)
• Strong understanding of identity and access, including SSO, OAuth, OIDC, SAML and conditional access
• Scripting and automation skills in Python, Bash or via APIs, plus the ability to explain risk clearly to engineers and non-technical stakeholders

Also valued: familiarity with EDR, SSE/SWG, DLP, email security and ASPM tools, and exposure to ISO 27001, SOC 2 and the OWASP Top 10.

Culture

• A business that has been recognised several times as a great place to work
• Collaborative, pragmatic approach to security: enabling engineers rather than slowing them down
• Suits someone curious and adaptable who enjoys variety across a broad range of security challenges
• Clear six-month goals, so you'll know exactly where you can make an impact from day one

What's on offer

• Hybrid working from a Sydney CBD office
• The chance to help build a security function from the ground up