Senior Security Engineer — DevSecOps & Cloud

Commonwealth Bank; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

x15ventures, part of CommBank's ecosystem, is seeking a Senior Security Engineer to design, build and improve security capabilities across its ventures. This hands-on role focuses on DevSecOps, cloud security, identity and automation, mentoring engineers and embedding security into delivery pipelines and cloud environments.

You will independently lead complex security engineering work, make sound technical decisions and own outcomes through to implementation, while collaborating with product,

Qualifications

• Strong hands-on experience in security engineering, cloud security, DevSecOps or related discipline.
• Experience designing and implementing security controls within modern software delivery pipelines.
• Strong cloud security experience across AWS and Azure, with deep technical capability in at least one platform.
• Practical experience securing cloud identity and access management, networking, workloads, data, logging and monitoring.
• Experience using infrastructure-as-code technologies such as Terraform, CloudFormation or Bicep.
• Experience with CI/CD platforms such as GitHub Actions, Azure DevOps, GitLab CI or similar technologies.
• Experience implementing security testing within delivery pipelines, such as static analysis, SCA, secrets scanning, container scanning and IaC scanning.
• Knowledge of Microsoft Entra ID and related identity governance capabilities.
• Experience with Microsoft Defender products, particularly Defender XDR/Endpoint/Cloud.
• Strong automation and scripting capability using Python, PowerShell or similar.

Responsibilities

• Embed security controls throughout the software development lifecycle.
• Design and implement security capabilities within CI/CD pipelines and IaC scanning.
• Interpret security findings, prioritise issues and remediate vulnerabilities with minimal delivery friction.
• Develop reusable pipeline components, guardrails and secure engineering patterns.
• Implement policy-as-code and automated compliance checks.
• Contribute to secure coding practices, threat modelling and security reviews for new products.

Skills

Security engineering

Cloud security

DevSecOps

CI/CD pipelines

Automation / scripting

Threat modelling

Security reviews

Python

PowerShell

Terraform

Tools

Terraform

CloudFormation

Bicep

GitHub Actions

Azure DevOps

Defender suite

Job description

x15ventures, part of CommBank's ecosystem, is seeking a Senior Security Engineer to design, build and improve security capabilities across its ventures. This hands-on role focuses on DevSecOps, cloud security, identity and automation, mentoring engineers and embedding security into delivery pipelines and cloud environments.

You will independently lead complex security engineering work, make sound technical decisions and own outcomes through to implementation, while collaborating with product,