Staff Security Engineer

Linkly; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Linkly, an Australian fintech, is seeking a Staff Security Engineer to own and scale its internal penetration testing capability across cloud-native platforms. This senior role partners with the CSO and engineering teams to validate design and configuration against security requirements.

You will drive Azure-based security guidelines and baselines, mentor other engineers, and help establish routine security assessments of cloud changes and new data products within the first year.

Qualifications

• 10+ years in security engineering, penetration testing or security consulting.
• Hands-on penetration testing experience and ability to establish/run a testing capability.
• Expert knowledge of Microsoft Azure, cloud-native attack techniques and misconfigurations.
• Proven experience in secure cloud architecture, especially on Azure.
• Experience developing threat models and guiding engineering to reduce risk.
• Strong scripting/programming skills to automate testing and build tooling.

Responsibilities

• Build and run Linkly’s internal penetration testing function for cloud, products and services.
• Conduct security assessments of changes to cloud infrastructure.
• Validate designs with engineering to ensure security requirements are met.
• Help set security guidelines and baselines for cloud environments.
• Provide security design reviews for upcoming initiatives and data products.
• Mentor engineers in the Security team and share expertise.

Skills

Azure security

Penetration testing

Threat modeling

Automation scripting

Security reporting

Mentoring

Tools

PowerShell

Python

Azure CLI

Terraform

Job description

About Linkly

Linklyis a PE-backed, Australian fintech focusing on payment integration solutions. We are a leading provider in ecommerce recurring billing, and our middleware powers over 200,000 terminals and processes over two billion transactions annually. Our applications support over 800 integrations into POS solutions. We have built our reputation through seamless integration of payment terminals and POS systems and are continuing to innovate in creating a terminal and acquirer independent payment solicitor for in-store. Our clients include major banks and retailers such as Woolworths, David Jones, JB Hi-Fi, and Bunnings.

Our goal is to continuously lead the payments industry withnew technologydelivering value to clients, which who include merchants, banks,acquirersand POS vendors, expanding our presence into other regions.

About the Role

We’re looking for a Staff Security Engineer to join our Security team and take ownership of building Linkly’s internal penetration testing capability.

This role requires deep technical cloud security expertise, with Azure as our primary platform.You’ll work closely with our Chief Security Officer, the wider Security team, and our engineering and operations teams to validate that the design and configuration of our products and services meet security requirements. Engineering owns the design; you make sure it holds up.

As a senior individual contributor, you’ll also share your expertise with the team, mentoring other engineers and helping lift security capability.

Within your first 12 months, you’ll have an internal penetration testing function in place and in use, security assessments of cloud infrastructure changes running routinely, and a defined set of security guidelines and baselines for the business.

Key Responsibilities

• Build and run Linkly’s internal penetration testing function, defining its approach and carrying out testing across our cloud infrastructure, products and services.
• Carry out security assessments of new changes to our cloud infrastructure.
• Consult with engineering teams and validate and test that the design and configuration of their products and services are secure and meet security requirements.
• Help set Linkly’s security guidelines and define the security baselines our cloud environments are built and measured against.
• Provide security design review and testing for upcoming initiatives, including our new data product.
• Mentor other engineers in the Security team, sharing your knowledge and experience.

What You’ll Need

• 10+ years’ experience as a security engineer, penetration tester or security consultant, operating at a senior level.
• Extensive hands-on penetration testing experience, including experience establishing or running a penetration testing capability.
• Expert, detailed technical knowledge of Microsoft Azure, including cloud-native attack techniques and common misconfigurations.
• Proven experience with secure cloud architecture, particularly on Azure.
• Proven experience developing threat models and helping engineering teams reason through different ways to reduce security risk.
• Strong scripting or programming skills (e.g. Python or PowerShell) to automate testing and build your own tooling.
• Ability to write clear, concise reports covering findings, risks and practical remediation recommendations.
• Strong communication skills, with the ability to explain technical security concepts to both technical and non-technical audiences.
• Experience mentoring other engineers.

Nice to Have

• AWS experience, including secure cloud architecture on AWS.
• Certified Ethical Hacker (CEH) or an equivalent certification.
• Exposure to PCI DSS and the payments industry.

Our Values

• Act Like an Owner:Take full accountability for outcomes and make decisions with the long-term success of Linkly in mind.
• Innovate:Challenge assumptions, champion new ideas and drive meaningful change for customers and the business.
• Deepen Trust:Build confidence through integrity, transparency and consistent delivery with your team, partners and clients.
• Care and Respect:Foster an inclusive, supportive environment where everyone feels valued and empowered to do your best work.