Senior Security Engineer: Strategy & Hands-On Defense

Bendigobank; City of Melbourne; Hybrid; AUD 140,000 - 200,000; Full time

Benefits offered by this job

Hybrid work model

Head Office Melbourne/Bendigo

Job summary

Bendigo Bank is seeking a Senior Engineer - Security Strategy & Engineering to bridge high-level security architecture with hands-on execution. You will consult with project teams, review designs, and implement security controls to protect the organisation and customers.

The role combines advisory and technical work across application, network, and cloud security, with a focus on threat modelling, secure-by-design practices, and collaboration with delivery squads in a hybrid model based at

Qualifications

• Experience applying STRIDE, MITRE ATT&CK, and OWASP to assess mitigations.
• Strong background in Security by Design and design review of solutions.
• Broad knowledge across application, network and cloud security disciplines.
• Ability to partner with technical and non-technical stakeholders effectively.
• Desirable experience in APRA-regulated financial services or similar regulation.

Responsibilities

• Review complex architectures and designs, embedding proactive security controls from inception.
• Act as security SME, combining advisory work with hands-on technical work.
• Lead threat modelling exercises to identify vulnerabilities early.
• Build, configure and validate security controls and testing regimes across environments.
• Uplift security maturity and advise delivery squads across bank-wide security practices.
• Navigate architectural reviews, problem-solve, and consult with stakeholders across teams.

Skills

STRIDE

MITRE ATT&CK

OWASP

Security by Design

Security architecture

Stakeholder advisory

Cloud security

Job description

Bendigo Bank is seeking a Senior Engineer - Security Strategy & Engineering to bridge high-level security architecture with hands-on execution. You will consult with project teams, review designs, and implement security controls to protect the organisation and customers.

The role combines advisory and technical work across application, network, and cloud security, with a focus on threat modelling, secure-by-design practices, and collaboration with delivery squads in a hybrid model based at