Principal Security Engineer Cyber Security Advisor Contract

About The Missing Link

The Missing Link is a leading Australian IT and Cyber Security services provider. We're seeking an experienced Principal Security Engineer / Cyber Security Advisor for a 12-month contract engagement in Melbourne, with potential for extension.

This is a senior, consulting-led role combining security engineering, architecture, cloud security and cyber risk advisory within a complex enterprise environment.

About the Role

You'll act as a trusted technical security advisor, working across engineering, architecture and business teams to deliver secure-by-design solutions and pragmatic, risk-based security controls.

The environment spans AWS/GCP, application security, IAM, DevSecOps, network security, threat modelling and governance, with a strong focus on Australian financial services regulation.

Key Responsibilities

• Lead security architecture reviews, solution assessments and threat modelling
• Conduct comprehensive security risk assessments
• Design secure architecture patterns, controls and cloud security standards
• Provide security guidance across AWS and/or GCP
• Embed security controls into DevSecOps and CI/CD environments
• Advise across IAM, SSO, PAM and federated identity
• Develop practical, risk-based controls and manage security exceptions
• Partner with engineering, architecture, risk and business stakeholders
• Ensure solutions align with relevant regulatory and security frameworks
• Provide senior technical security leadership and mentoring

About You

You're an experienced security practitioner with broad capability across security engineering, architecture and risk, rather than a specialist in only one security technology.

Essential Experience

• Significant senior-level cyber security engineering or security architecture experience
• Strong AWS and/or GCP cloud security capability
• Security architecture, threat modelling and risk assessment experience
• Strong knowledge across IAM, AppSec, network security and DevSecOps
• Experience with CI/CD security, SAST, DAST, SCA and security automation
• Understanding of Terraform/IaC, Docker and Kubernetes
• Experience with modern identity platforms such as Microsoft Entra ID and/or Okta
• Strong understanding of risk-based security control design
• Experience working in highly regulated enterprise environments
• Knowledge of APRA CPS 234, CPS 230, ISO 27001, NIST CSF, Essential Eight and the Privacy Act 1988
• Strong stakeholder management and the to of -

Desirable Certifications

CISSP, CISM, CCSP, AWS Security Specialty or Google Professional Cloud Security Engineer certifications will be highly regarded but are not mandatory.

Contract Details

• 12-month contract, with potential extension
• Melbourne
• Hybrid
• Senior / Principal-level engagement