Who Are We
Hansen Technologies is a leading global provider of software and services that enable organisations to transform customer experiences and streamline critical business processes. With a rich history of innovation and a footprint that spans over 80 countries, Hansen empowers utilities, energy, and communications companies to thrive in an ever-evolving digital landscape. Our commitment to excellence, customer focus, and collaborative culture makes Hansen a place where passionate professionals can make a meaningful impact, drive real change, and help shape the future of industries worldwide.
We are proud to be an equal opportunities employer. Hansen prides itself on celebrating diversity and is committed to creating an inclusive environment for all employees, even extending this to how we work with our customers, partners, and suppliers. We welcome applications from all qualified candidates, regardless of age, disability, gender identity or expression, marital status, race, ethnicity, religion or belief, sexual orientation, or any other protected characteristic. If you require any adjustments or accommodation during the recruitment process, please let us know.
Why This Role Matters
Build Secure Products, Enable Fast Teams and Raise the Bar.
As Principal Product Security Consultant, you will play a pivotal role in shaping how security is embedded into Hansen’s software ecosystem. This is not a compliance‑only role; it is about modern, scalable, developer‑aligned product security.
You will:
Define and mature Hansen’s enterprise Product Security and Application Security program
Enable engineering teams to deliver faster, safer software through pragmatic tooling, guidance, and automation
Act as a hands‑on technical authority and trusted advisor, influencing how security is designed into products from day one
Champion the use of AI and automation in the SDLC, improving signal quality, reducing friction, and driving meaningful security outcomes
Your impact will be visible across global product teams, influencing everything from threat modelling and tooling adoption to developer enablement and vulnerability transparency.
What You’ll Do
Lead Product & Application Security Uplift: Design, evolve, and execute an enterprise‑wide Product Security and AppSec program aligned to business priorities.
Embed Security into the SDLC: Provide hands‑on guidance to engineering teams on secure design, development, and delivery practices.
Own AppSec Tooling & Platforms: Operate, improve, and optimise security tooling (SAST, DAST, SCA, IaC, container scanning), reducing noise while increasing adoption and impact.
Enable Teams, Not Block Them: Evangelise secure development practices through enablement, documentation, and a thriving Security Champions program.
Threat Model What Matters: Establish and operationalise threat modelling practices across products, coaching teams to think adversarially and proactively.
Bring AI into AppSec: Champion and integrate AI capabilities within the SDLC and security platforms to enhance detection, prioritisation, and insight.
Measure & Communicate Risk: Build meaningful reporting that provides leadership with a clear, enterprise-wide view of product security posture and vulnerability risk.
What You Bring
Proven experience leading or building a Product Security program in a complex software environment
Strong background in software engineering or DevOps, or equivalent demonstrable technical expertise
Deep knowledge of application security tooling, platforms, and CI/CD integrations
Experience configuring policies, tests, and guardrails within modern delivery pipelines
Ability to influence, coach, and partner with engineers and product leaders
Confidence operating as a senior approval and advisory layer for higher‑risk application architectures
A pragmatic mindset - focused on outcomes, not theory
Nice to have
Familiarity with security frameworks and their practical application in AppSec
Experience with threat modelling methodologies (and training others to use them)
Awareness of regulatory and privacy requirements (e.g. GDPR)
Relevant security certifications (e.g. CSSLP, GIAC, AWS/Azure Security, OSCP, CEH)
Benefits and Perks
Join us for a rewarding career with competitive compensation, leave entitlements, health coverage, and financial security. Enjoy work-life balance, growth, and recognition for your exceptional performance. Our team will unveil the intricacies of our benefit package during the selection process.
Skills Required
- Proven experience leading or building a Product Security or AppSec program in a complex software environment
- Strong background in software engineering or DevOps (or equivalent demonstrable technical expertise)
- Deep knowledge of application security tooling, platforms, and CI/CD integrations (SAST, DAST, SCA, IaC, container scanning)
- Experience configuring policies, tests, and guardrails within modern delivery pipelines
- Ability to influence, coach, and partner with engineers and product leaders, and operate as a senior advisory layer for high-risk architectures
- Pragmatic, outcomes-focused mindset with experience driving measurable security improvements
- Experience embedding security into the SDLC and running developer enablement or Security Champions programs
- Familiarity with security frameworks and their practical application in AppSec
- Experience with threat modelling methodologies and training others to use them
- Awareness of regulatory and privacy requirements (e.g., GDPR)
- Relevant security certifications (e.g., CSSLP, GIAC, AWS/Azure Security, OSCP, CEH)
What We Do
Hansen Technologies (ASX:HSN) is a global software and services provider to the energy, water/utilities and telecommunications industries. The company currently serves more than 600 customers in over 80 countries, supported by a collaborative and diverse team that embraces the hybrid way of working. For connection and collaboration, we have more than 36 offices and development centres located around the world. Within the communications industry, 5G represents the next new frontier for our customers – that unchartered territory to create opportunities and capitalise on new business models and resulting revenue streams. In the energy sector, we are in the midst of a transition. The move to renewables and self-generated energy changes the traditional commercial model. Today, our customers are no longer in the era of supplying basic commodity services - they are in era of providing new energy services and related experiences. We help our customers traverse these challenges and opportunities and realise the next new monetisable experiences. And that is why our mission is to provide industry-specific software products and expertise that enables our customers to easily capitalise on the commercial opportunities of the evolving energy, utilities and communications markets. We make this possible by providing highly reliable, mission-critical software and specific industry expertise to help our customers more easily innovate and sell new services and market offerings, comply with changing market regulation, and power new business models in areas such as emerging sustainable energy supply, IoT, and new next-generation connected services. We aim to achieve this through long term collaboration with our customers and partners and through a global workforce of skilled professionals that embrace challenges and are committed to positive outcomes for our company, employees, customers, and the planet
