Senior Security Engineer – Hybrid Sydney, Health Data

Everlab; Sydney; Hybrid; AUD 150,000 - 210,000; Full time

Benefits offered by this job

Employee Share Option Plan

Hybrid work model

Health program access

Job summary

Everlab is a fast-growing Australian healthtech startup building a comprehensive health data platform. We seek a Senior Security Engineer to own security and compliance end-to-end, setting direction and carrying out critical work with platform and IT teams.

You will manage risks, enforce GDPR/ISO27001/SOC 2, secure cloud environments (AWS/GCP), and drive automation to scale security across the business. You should bring 5+ years of security experience in startups or scale-ups, a strong sense of

Qualifications

• 5+ years of security experience as an individual contributor with broad remit
• Experience securing regulated, sensitive-data environments (healthcare preferred)
• Startup experience or scale-from-early-stage background
• Knowledge of GDPR, ISO 27001 and SOC 2 compliance
• Cloud security, IAM, SaaS security and application security fundamentals
• Bias toward automation and preventative controls over headcount
• Autonomous, cross-team collaboration and ownership mindset
• Experience using AI to accelerate security work

Responsibilities

• Own the risk register and drive risks to closure with automation and controls
• Perform hands-on security work: access reviews, SSO, MFA, cloud hardening
• Drive cross-team fixes and verify them end-to-end
• Own compliance programs (ISO 27001, GDPR) and evidence
• Manage vendor security questions, third-party reviews, incident response
• Scale the security function with automation rather than headcount

Skills

Security engineering

Risk assessment

Cloud security (AWS/GCP)

Identity & access management

Automation

Independent operator

Tools

GCP

AWS

Vanta

SAML/SSO

MFA configuration

Job description

Everlab is a fast-growing Australian healthtech startup building a comprehensive health data platform. We seek a Senior Security Engineer to own security and compliance end-to-end, setting direction and carrying out critical work with platform and IT teams.

You will manage risks, enforce GDPR/ISO27001/SOC 2, secure cloud environments (AWS/GCP), and drive automation to scale security across the business. You should bring 5+ years of security experience in startups or scale-ups, a strong sense of