JobCubby JobCubby
Sign up
XPT Software Australia Pty Ltd

Principal Security Engineer

XPT Software Australia Pty Ltd Victoria, Australia

IT Services and IT Consulting · 51-200 employees

2 d ago
security Senior (5-10 yrs) Contractor Australia
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

The Principal Security Engineer will lead security architecture, governance, and risk management initiatives across cloud and application environments. They will be responsible for implementing security automation, managing IAM frameworks, and ensuring regulatory compliance.

What they look for

Cloud Security Application Security IAM DevSecOps Security Architecture Governance, Risk & Compliance AWS GCP Zero Trust Threat Modelling Security Automation CI/CD Infrastructure as Code Terraform Ansible Risk Management

Requirements

Candidates must possess 4-8 years of experience with strong expertise in AWS/GCP, DevSecOps, and security risk assessments. Professional certifications such as CISSP, CISM, or CCSP are preferred.

Full description

We are looking for an experienced Principal Security Engineer with strong expertise across Cloud Security, Application Security, IAM, DevSecOps, Security Architecture and Governance, Risk & Compliance (GRC).

Key Skills Required:

  • Strong experience in AWS and/or GCP Cloud Security.
  • Security Architecture, Zero Trust and Threat Modelling.
  • Application Security (AppSec) and DevSecOps.
  • IAM – SSO, OAuth 2.0, SAML and PAM.
  • Security automation, CI/CD, SAST, DAST and SCA.
  • Infrastructure as Code – Terraform and Ansible.
  • Security Risk Assessments and Risk Management.
  • Regulatory compliance – APRA CPS 234, CPS 230, ISO 27001 and NIST CSF.
  • Strong stakeholder management, consulting and technical leadership skills.

Preferred: CISSP, CISM, CCSP or cloud security certifications.

Note: Candidates must have broad cybersecurity experience combining hands-on security engineering, architecture and risk governance.

Similar roles