Staff Engineer - Security

News Corp; Melbourne; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Flexible leave options

Flexible parental leave

Because We Care volunteering & matched

Hackdays

Job summary

REA Group in Melbourne, Sydney, Brisbane or Adelaide seeks a Staff Engineer - Security to lead security design and implementation across SaaS, endpoints and AI-enabled tooling. You’ll shape secure architectures, mentor engineers, and partner with Enterprise Technology to embed controls at scale.

You will drive risk-based decisions, own core security platforms, and influence roadmaps to balance resilience, privacy and operational velocity.

Qualifications

• 8+ years in security engineering or closely related roles within modern cloud environments.
• Senior technical leader or staff/principal level engineer influencing cross-team security outcomes at scale.
• Experience embedding security into design and delivery with software/platform/data teams.
• Proven experience leading or contributing to technical responses for major security incidents or vulnerabilities.
• Expert-level enterprise security architecture and engineering experience.
• Strong experience with identity management concepts and technologies.
• Hands-on with security tooling across detection/response (SIEM), endpoint security, SaaS security, access and credential management.
• Comfort with infrastructure-as-code (Terraform), automation, CI/CD, observability in cloud-native ecosystems (AWS, GCP, Azure).
• Solid understanding of risk management and standards (NIST CSF, ISO 27001, PCI-DSS).

Responsibilities

• Provide hands-on technical leadership across complex security initiatives, guiding design, implementation and operation of secure solutions.
• Partner with Enterprise Technology to embed appropriate security controls into employee-facing tech.
• Champion information protection initiatives within Enterprise Technology.
• Lead identification, assessment and prioritisation of security risks in key technologies and remediation strategies.
• Own and improve core Enterprise security platforms and controls (identity, SSO, data protection, endpoint management).
• Develop frameworks and tooling for managing security of SaaS platforms.
• Manage authentication controls to remain phishing-resistant and user friendly.
• Mentor security and software engineers, lifting security capability across the org.
• Collaborate with Security Operations, GRC and Technology leadership to align controls with priorities and risk appetite.
• Influence roadmaps so security/privacy considerations are built into long-term planning.
• Familiarity with AI/LLM security risks in enterprise environments.
• Track emerging threats and translate them into actionable improvements to REA's security posture.

Skills

Security engineering

Cloud security

Identity management

SaaS security

SIEM

EDR

Terraform

Education

Bachelor's degree in Computer Science

Tools

SIEM

EDR

Terraform

Job description

• Shape and build enterprise security capabilities across SaaS, endpoints and workforce AI.

• Tackle emerging security challenges and help develop solutions that set a high bar for the industry.

• Permanent opportunity based in Melbourne, Brisbane, Sydney or Adelaide. Perth may be considered for the right candidate.

We're REA

With bold and ambitious goals, REA Group is changing the way the world experiences property. No matter where you’re at on your property journey, we’re here to help with every step, whether that’s finding or financing your next home.

Our people are the key to our success. At the heart of everything we do is a thriving culture centred around high performance and care. We are purpose-driven and collaborative, which drives innovation and our ability to make a real impact. We’re proud to have been named one of Australia’s Best Workplaces four times since 2021, including third place in 2025, as well as Best Workplace for Women in 2023 and Best Workplace in Technology in 2024 and 2025. These accolades are a testament to every person who helps make REA a great place to work.

Which team is this in

The Enterprise Security team exists to secure the technology our staff use to get their jobs done. This includes our identity infrastructure as well as the hardware, networks and software that we REA staff and contractors work with.

The Staff Engineer - Security provides deep technical leadership to design, build and continuously improve REA's security infrastructure as well as our endpoints, network and software platforms, enabling teams to deliver quickly and safely at scale.

Day to day of the job

• Provide hands-on technical leadership across complex security initiatives, guiding design, implementation and operation of secure solutions.

• Partner with Enterprise Technology to embed appropraite security controls into our employee-facing technology.

• Champion information protection initiatives within our Enterprise Technology

• Lead the identification, assessment and prioritisation of security risks in key technologies, and drive pragmatic remediation strategies.

• Own and improve core Enterprise security platforms and controls (e.g. identity, single sign on, data protection & endpoint management).

• Develop frameworks and tooling for managing the security of SaaS platforms.

• Manage our authentication controls to ensure they remain phishing-resistant and user friendly.

• Continue to help ensure that users have appropriate levels of access, including through the deployment and management of just-in-time and time-bound privileged access

• Mentor and coach security and software engineers, lifting security engineering capability across the broader engineering community.

• Collaborate with Security Operations, Security GRCand Technology leadership to align security controls with business priorities and risk appetite.

• Influence technology roadmaps so that security, resilience and privacy considerations are built into long-term planning and investment decisions.

• Familiarity with the security risks introduced by AI and LLM-enabled tools in enterprise environments, such as data leakage and unsafe integrations.

• Track emerging threats, technologies and industry practices and translate them into actionable improvements to REA's security posture.

Who we’re looking for

• Extensive experience in security engineering or closely related roles within modern cloud-based engineering environments (typically 8+ years in relevant roles).

• Demonstrated track record as a senior technical leader or Staff/Principal-level engineer influencing cross-team security outcomes at scale.

• Proven experience collaborating with software, platform and data engineering teams to embed security into design and delivery.

• Experience leading or significantly contributing to the technical response for complex security incidents or major vulnerabilities.

• Expert-level experience in enterprise security architecture and engineering.

• Strong experience with identity management concepts and technologies

• Hands-on experience with common security tooling across detection and response (SIEM), endpoint security configuration (EDR, containers, secure configuration), SaaS security configuration, and access and credential management (secrets management, privileged access, identity tooling).

• Skilled with infrastructure-as-code (e.g., Terraform), automation, and CI/CD practices and observability, with a willingness to build and maintain security integrations within cloud-native environments (AWS, GCP, Azure).

• Solid understanding of security risk management and industry frameworks/standards relevant to REA (e.g. NIST CSF, ISO 27001 and PCI-DSS).

The REA experience

The physical, mental, emotional and financial health of our people is something we’ll never stop caring about. This is a place to learn and grow.

Some of our perks and benefits include:

• A hybrid and flexible approach to working.

• Flexible leave options, including birthday leave and the option to purchase additional leave.

• Flexible parental leave for primary and secondary carers.

• Our Because We Care program, offering volunteering leave, community grants and matched payroll giving. Our Community Café donates 100% of its revenue to charity.

• Hackdays, so you can bring your big ideas to life.

Our commitment to Diversity, Equity, and Inclusion

We are committed to providing a working environment that embraces and values diversity, equity and inclusion. We believe teams with diverse ideas and experiences are more creative, more effective and fuel disruptive thinking. If you’ve got the skills, dedication and enthusiasm to learn but don’t necessarily meet every single point on the job description, please still get in touch.

Join our Talent Neighbourhood

Keen to be part of REA but didn’t find a perfect match with this opportunity? Perhaps the timing isn’t right? You should join our Talent Neighbourhood!

#LI-HYBRID

Req ID R0015253