Principal Security Engineer

We are looking for an experienced Principal Security Engineer with strong expertise across Cloud Security, Application Security, IAM, DevSecOps, Security Architecture and Governance, Risk & Compliance (GRC).

Key Skills Required

• Strong experience in AWS and/or GCP Cloud Security.

• Security Architecture, Zero Trust and Threat Modelling.

• Application Security (AppSec) and DevSecOps.

• IAM – SSO, OAuth 2.0, SAML and PAM.

• Security automation, CI/CD, SAST, DAST and SCA.

• Infrastructure as Code – Terraform and Ansible.

• Security Risk Assessments and Risk Management.

• Regulatory compliance – APRA CPS 234, CPS 230, ISO 27001 and NIST CSF.

• Strong stakeholder management, consulting and technical leadership skills.

Preferred: CISSP, CISM, CCSP or cloud security certifications.

Note: Candidates must have broad cybersecurity experience combining hands-on security engineering, architecture and risk governance.