Senior Security Engineer - DevSecOps

carsales; City of Melbourne; Hybrid; AUD 140,000 - 200,000; Full time

Benefits offered by this job

Best Workplaces Australia

Parental leave (24 weeks)

Hackathons

Wellbeing initiatives

Job summary

carsales seeks a Senior DevSecOps Engineer to join our Cyber Security team, embedding security into infrastructure and CI/CD pipelines at scale. You will design, implement, and mature secure patterns across complex environments with strong autonomy.

The role offers hybrid working with a focus on collaboration across teams to strengthen security, automate processes, and advance incident response capabilities.

Qualifications

• Demonstrated experience in software engineering/platform engineering and security engineering.
• Experience implementing end-to-end orchestration and secure patterns in AWS.
• Experience designing and maintaining CI/CD gates across the build, release and run phases.
• Exposure to vulnerabilities remediation at run time.
• Hands-on practical use of AI for security; curiosity for novel threats.
• Team player with ability to influence across technical teams.

Responsibilities

• Standardize security practice through Infrastructure-as-code and services orchestration in AWS.
• Secure CI/CD pipelines and deployment practices.
• Automate VulnOps and secure dependencies management.
• Build observability and monitoring capabilities on agentic systems with OTEL.
• Contribute to incident response efforts.

Job description

Are you ready to be a big part of something big?

At carsales, we're all about making buying and selling a great experience. Since 1997, we've been evolving with the new economy to help people choose how they move - today and tomorrow.

When it comes to your career, we want to offer meaningful opportunities that empower you to make a lasting impact. But for that to happen, we strive to feel small - small enough to stay agile, learn across teams, and connect authentically with each other.

With a vision to be the global leader in online vehicle marketplaces, we're transforming how people buy and sell across the world. We discover new ideas and bring them to life. We continue to grow, and we continue to evolve and we're not afraid to take bold steps to get there.

As a Senior DevSecOps engineer, you will operate at the junction of software development and security, helping our platform engineering and application security teams to standardize and automate at scale how we build, deploy and run cloud applications and agentic systems. This role is suited for a builder who can design, implement, and mature solutions across complex environments. This position sits within ourCyber Securityteam and offers a high level of autonomy to operate and a direct influence into the engineering roadmap.

We embrace hybrid working - combining the flexibility of remote work with the energy and connection of in-person collaboration. We champion flexibility, offer a range of policies, and leave options to support your wellbeing.

What's on offer

• Recognition as one of Australia's Best Workplaces™ by Great Place to Work®, a Family Friendly Workplace, a WORK180 endorsed employer.
• A highly engaged, collaborative team where you'll learn from exceptional talent.
• 24 weeks paid parental leave for primary caregivers, four weeks for secondary caregivers, and six weeks paid gender-affirming care leave.
• Regular hackathons, continuous learning opportunities, and wellbeing initiatives that support your mental, emotional, and physical health.

Job Description

What you'll be doing

As a Senior DevSecOps Engineer,you'llembed security automation into our infrastructure and CICD pipelines to secure our build and run.As a technical SME, youwillplay a hands-on role in shifting security left and in empowering engineering teams with secure components and patterns.

• Standardize security practice through Infrastructure-as-code and services orchestration in AWS.
• Secure CI/D pipelines and deployment practices.
• Automate VulnOps and securedependencies management.
• Build observability and monitoring capabilities on agentic systemswith OTEL.
• Contribute to incident response efforts.

Qualifications

What we're looking for

• Demonstrated experience in software engineering/platform engineeringand security engineering.
• Experience implementing end-to-end orchestration and secure patterns in AWS.
• Experience designing and maintaining CICD gates across the build, release and run phases. Exposure to secure dependency management best practices.
• Exposure to vulnerabilities remediation atrun time.
• Hands-on practical use of AI for security, high degree ofcuriosity for novel threats and agentic systems.
• Team player with ability to influence and multiply what good looks like across technical teams.

We know not everyone will meet every requirement, and that's okay. If you're excited about the role and believe you can make a difference, we’d love to hear from you.

Additional Information

A few other things we want you to know...

• As an equal opportunity employer, carsales welcomes applications from individuals of all backgrounds, identities, abilities, and life experiences. We are committed to fostering a diverse and inclusive workplace where everyone feels valued and supported.
• If you have a disability or require adjustments to participate fully in the recruitment process, please let us know - we're here to support you.
• We understand the importance of work-life balance and offer flexible working arrangements, including part-time options. If you'd like to explore this, just ask during the process.
• We're also a proud Circle Back Initiative employer, which means we commit to responding to every applicant.
• Successful candidates joining the carsales team will need to complete a National Police Record check and must have full-time Australian working rights.

So come join us - because every role plays a vital part in our journey toward something big!

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply