Product Security Engineer
Commonwealth Bank · Perth, Western Australia, Australia
Financial Services · 10,001+ employees
About the role
The Product Security Engineer will embed security practices into product delivery by performing code reviews, security testing, and risk assessments. They will partner with engineering teams to provide practical security guidance and ensure secure-by-design principles are integrated throughout the development lifecycle.
What they look for
Requirements
Candidates should have experience in application security, product security, or secure software engineering with strong skills in code review and object-oriented programming. A background in software engineering combined with knowledge of common security vulnerabilities and a collaborative approach to security guidance is required.
Full description
Product Security Engineer
- Embed application security into fast-moving product delivery across Bankwest-facing technology teams.
- Work hands-on with engineers through code reviews, security testing and secure-by-design practices.
- Help teams deliver safer customer experiences by identifying risks early and improving secure engineering capability.
Do Work That Matters:
At CommBank, we’re building tomorrow’s bank today. Technology is at the heart of everything we do, and security is fundamental to providing safe, secure and trusted experiences for millions of customers.
We are seeking a Product Security Engineer to join Group Security, supporting Bankwest-facing technology teams to embed security into the way software is designed, built and delivered. This is a hands-on role focused on application security, secure code review and practical security guidance across smaller, faster-moving units of work.
You’ll work closely with engineering teams to review application changes, identify risks early and help teams build secure products at speed. This is an opportunity to apply your technical skills in a progressive environment where security is part of everyday delivery, not an activity left until the end.
See yourself in our team:
Group Security is part of Technology and brings together security and resilience capabilities across cyber security, protective security and business resilience, fraud technology and operations, and cyber defence. The team’s purpose is safeguarding a brighter future for all by securing the bank, protecting customers, building recovery capability and creating an admired place to work.
As part of our Product Security capability, you’ll help strengthen secure engineering practices across Bankwest-facing teams. You’ll support the shift-left approach by embedding security earlier in the development lifecycle, helping reduce risk while enabling faster and safer delivery of technology solutions.
On any given day, you will:
- Perform application security assessments, including source code reviews and security testing activities.
- Review smaller units of application change and provide clear, practical security recommendations.
- Partner with engineering teams to identify vulnerabilities and support pragmatic remediation.
- Help embed secure-by-design principles throughout the software development lifecycle.
- Support product teams to balance security, customer experience and delivery outcomes.
- Contribute to secure coding practices, security standards and improved ways of working.
- Use automation and modern engineering practices to improve the efficiency and consistency of security review.
- Support the uplift of application security capability by sharing knowledge with engineers and security champions.
We are interested in hearing from people who have:
- Experience in Application Security, Product Security, secure software engineering or a closely related field.
- Strong experience reviewing code, with confidence working across object-oriented programming environments.
- Understanding of secure software development practices and common application security vulnerabilities.
- Experience with source code reviews, application security testing, penetration testing or secure design reviews.
- A software engineering background with demonstrated interest or experience in cybersecurity.
- Relevant security learning, certifications, coursework or hands-on security champion experience.
- The ability to provide practical guidance to engineering teams in a clear and collaborative way.
- Curiosity about automation, AI and modern engineering practices that can improve security outcomes.
Working with us:
At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696.
If this sounds like you, apply now.
If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.
We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.
Advertising End Date: 19/08/2026
