Senior Security Engineer (Platform Security Focus)

CMC Markets; Sydney; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Birthday leave

Charity day

Zero brokerage trades

Learning & development

Wellbeing hub

Office five days in the office

Job summary

CMC Markets is seeking a Senior Platform Security Engineer to strengthen the security of our customer-facing trading platforms. Reporting to the Head of Security - APAC, you will deliver hands-on security engineering across the trading stack, partnering with Engineering, DevOps and the Security team to identify risks and implement robust controls.

You’ll influence security across the software delivery lifecycle, review designs, drive security improvements, and focus on our stockbroking platform.

Qualifications

• 5 years experience in Security Engineering, Platform Security or Application Security roles.
• Experience in financial services, fintech, trading or other highly regulated environments.
• Demonstrated experience securing customer-facing platforms, applications and APIs, preferably within financial services, fintech or other highly regulated environments.

Responsibilities

• Design, implement and continuously improve security controls protecting trading platforms and APIs.
• Partner with Engineering, Development and DevOps teams to embed security throughout design, development and operation.
• Provide security guidance for new platform capabilities and technology initiatives, helping engineering teams identify risks and implement controls.
• Review vulnerability assessments and penetration testing reports, prioritising and remediating security risks.
• Lead or support investigations and responses to security incidents affecting customer-facing platforms and accounts.
• Drive continuous improvements to platform security through tooling, automation, monitoring and detection.

Skills

Security Engineering

Platform Security

Application Security

WAFs

Identity Security

Cloud Security

Communication

Tools

WAFs

IAM

Cloud Platforms

Job description

If you care about protecting the services people use to trade and invest, this work has a clear purpose. At CMC Markets, you'll join a global leader in CFD trading and share investing. You'll help deliver the ultimate trading experience for customers.

We're looking for a Senior Platform Security Engineer. Reporting to the Head of Security - APAC, the Senior Security Engineer will be responsible for enhancing the security and resilience of CMC's customer‑facing trading platforms.

As part of the APAC Security team, you will provide hands‑on security engineering expertise across the organisation's trading platforms, working closely with the wider Security team and partnering with Engineering, Development and DevOps teams to identify and manage security risks, implement effective security controls, and support the prevention, investigation and response to security incidents. This is a hands‑on security engineering role focused on protecting customer‑facing trading platforms.

You will work across the software delivery lifecycle to provide security guidance, review new platform capabilities and designs, implement security controls, and drive continuous improvements to the organisation's platform security posture. This role will have a dedicated focus on the security of CMC's stockbroking platform. You'll deliver security services for the platform, improve its security controls and help build new security capabilities. In this role, you'll combine technical expertise with hands‑on delivery, applying your technical judgement to solve complex security challenges, build trusted relationship across teams, and drive meaningful security outcomes.

Why You'll like working here

Just some of the reasons you’ll love working here include: Leave benefits: Enjoy your birthday off to spend time with family and friends, on us! Utilise a free annual charity day to give back to your community. $0 Trades: Staff & family trading accounts with CMC Markets Invest have access to the best brokerage rates in the market - $0 trades for all domestic and international equity orders! Continuous learning: Our L&D offering covers both technical and performance training, ensuring you're always learning new skills. Unlimited access to a dedicated benefits & wellbeing hub where you can save money through various retailer discounts, and make use of a variety of resources that will enhance your physical and mental wellbeing. Collaboration: We believe that great things happen when smart people work together, that’s why we’ve made the decision to work five days in the office. Office perks: Help yourself to free breakfast cereals, condiments, and coffee to fuel your workday. Our culture club provides opportunities for everyone whether you’re into fitness, pizza making classes, socialising or bringing out your competitive side in trivia or lawn bowls!

What you’ll be working on

Your work will span the software delivery lifecycle. You'll give security guidance, review platform designs and put controls in place. You'll also improve how CMC protects its trading platforms, services and customer accounts.

What you'll do

Design, implement and continuously improve security controls protecting CMC's customer‑facing trading platforms and APIs. Partner with Engineering, Development and DevOps teams to embed security throughout the design, development and operation of customer‑facing platforms. Provide security guidance for new platform capabilities and technology initiatives, helping engineering teams identify security risks and implement appropriate security controls. Support and enhance platform security capabilities, including web application protection, identity security and cloud security controls. Review vulnerability assessments and penetration testing reports, partnering with engineering teams to prioritise and remediate security risks. Lead or support the investigation and response to security incidents affecting customer‑facing trading platforms, services and customer accounts. Support the wider Security Operations function with technical expertise, investigations and security engineering initiatives. Drive continuous improvements to platform security through enhancements to security tooling, automation, monitoring and detection capabilities.

What will help you be successful?

5 years experience in Security Engineering, Platform Security or Application Security roles. Experience in financial services, fintech, trading, banking or another highly regulated environment is highly desirable. Demonstrated experience securing customer‑facing platforms, applications and APIs, preferably within financial services, fintech or other highly regulated environments. Strong hands‑on experience implementing and managing Web Application Firewalls (WAFs) and other application‑layer security controls. Strong understanding of authentication, authorisation, identity providers and identity security concepts. Experience working with application, platform and cloud architectures, with the ability to identify security risks and provide practical security guidance to engineering teams. Demonstrated experience investigating and responding to security incidents affecting customer‑facing platforms or digital services. Experience reviewing vulnerability assessments and penetration testing reports, prioritising security risks and driving remediation activities. Experience implementing and supporting security capabilities across application, platform and cloud environments. Excellent communication and stakeholder engagement skills, with the ability to work effectively across both technical and non‑technical teams. Experience within financial services, fintech, trading or other highly regulated industries is highly desirable.

The things we live by CMC Markets

CMC Markets is powered by our people. We are an equal opportunities employer and are committed to creating a diverse and inclusive workplace, where our people feel confident to be themselves, feel valued and are able to do their best work. We don’t just value differences and unique perspectives, we seek them out and we invite them in, because we know it will lead to better outcomes for everyone.

Please be vigilant when applying for jobs online. CMC Markets will never request personal identification details, such as Date of Birth or Tax File Number prior to an offer being made. If your initial application is successful, regardless of whether you've applied directly or through an approved recruiter, you will always liaise with a representative from CMC's Talent Acquisition team. We will only discuss a role you have formally applied for via phone or email (CMC Markets email address); and never via Facebook or Telegram. CMC Markets is one of the world’s first ever fin-tech companies and was launched in 1989 to break down the barriers of financial trading and make trading accessible to everyone. Our mission is to use our award-winning, Next Generation trading platform and unparalleled client service to empower millions of people to have the best trading experience out there. Our clients can trade on thousands of instruments using the best technology, supported by sophisticated charting, competitive pricing and automated execution. We're trusted by investors globally, but also by banks, brokers, funds and trading desks though our top‑tier liquidity institutional offering, enabling these businesses to expand into new markets and increase revenue potential. We were recently listed on the FTSE250, and our business continues to go from strength to strength as we continue to invest in our technology and our people.