Senior Security Engineer

This position is based in the Austroads Sydney or Melbourne office.

The Senior Security Engineer will play a key role in strengthening Austroads' security posture by implementing cloud-native and third-party security solutions, supporting operational teams, and ensuring that technical controls are effective, scalable, and aligned with business and compliance requirements.

Major responsibilities/accountabilities

The role is responsible for:

• Cloud Security Engineering
  • Designing, implementing, and managing security controls in Azure and AWS environments, such as IAM, network security, logging, and monitoring.
  • Ensuring cloud configurations align with best practices and compliance frameworks (e.g. CIS, Essential Eight, ISO 27001).
  • Supporting application and infrastructure teams with secure architecture and deployment guidance.
• Security Controls Implementation and Support
  • Deploying and maintaining technical security tools such as XDR, Zero Trust, vulnerability scanners, and cloud security posture management (CSPM) platforms.
  • Implementing and maintaining endpoint, network, and identity security controls across the organisation.
  • Integrating security tools and controls with existing infrastructure and ensure effective alerting, logging, and reporting.
  • Troubleshooting and resolving issues related to security tooling and configurations.
  • Conducting configuration reviews and hardening of systems, applications, and cloud services.
  • Supporting technical assurance activities including penetration testing and remediation tracking.
• Operational Support
  • Collaborating with security operations, risk and compliance teams to support incident response, forensic investigations, risk assessments, and compliance initiatives.
  • Provide technical expertise and backfill support during peak operational periods or resource gaps.
  • Identifying opportunities to enhance security tooling, automation, and control
    effectiveness.
  • Staying current with emerging threats, technologies, and best practices in cloud and enterprise security.
  • Supporting the automation of security processes.
• Supporting the Information Security Team
  • Collaborating with technology and business teams to achieve information security outcomes.
  • Contributing to continuous improvement, identifying ways to enhance value for our members and the public
  • Maintaining Quality Systems processes and procedures associated with the function
  • Other duties as directed

Qualifications, knowledge, and experience

The Senior Security Engineer will possess:

• Significant experience in cybersecurity engineering, with strong hands-on experience in Azure and AWS.
• Proven experience implementing and managing security tools and platforms.
• Strong understanding of cloud-native security controls, identity and access management, and infrastructure hardening.
• Familiarity with security frameworks such as ISO 27001, NIST, CIS and ACSC Essential Eight.
• Certifications such as CISSP, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, or equivalent.
• Experience with scripting or automation (e.g., PowerShell, Python, Terraform).
• Exposure to container security, CI/CD pipelines, and DevSecOps practices.
• Exposure to regulatory compliance requirements and technical audit support

The incumbent will need to present a professional image and build a strong relationship across the
enterprise. Specifically, the role requires:

• Excellent leadership, initiative, innovativeness and drive, and the ability to work independently to deadlines and within time constraints, to handle tasks with discretion, confidentiality, reliability and flexibility, and to set priorities
• Demonstrated high level organisational and administrative ability.
• Highly developed interpersonal and communication skills, both oral and written, including the ability to deal tactfully and effectively with people at all levels.
• Comfortable working in a fast-paced environment
• A service focused approach
• Sound judgement and problem-solving ability
• Strong networking and teamworking skills
• Strong attention to detail
• Commitment to ongoing professional development and learning
• Professional ethics and integrity
• Comfort working in an environment which is constantly evolving