We are looking for an experienced Principal Security Engineer with strong expertise across Cloud Security, Application Security, IAM, DevSecOps, Security Architecture and Governance, Risk & Compliance (GRC).
Key Skills Required:
Strong experience in AWS and/or GCP Cloud Security.
Security Architecture, Zero Trust and Threat Modelling.
Application Security (AppSec) and DevSecOps.
IAM – SSO, OAuth 2.0, SAML and PAM.
Security automation, CI/CD, SAST, DAST and SCA.
Infrastructure as Code – Terraform and Ansible.
Security Risk Assessments and Risk Management.
Regulatory compliance – APRA CPS 234, CPS 230, ISO 27001 and NIST CSF.
Strong stakeholder management, consulting and technical leadership skills.
Preferred: CISSP, CISM, CCSP or cloud security certifications.
Note: Candidates must have broad cybersecurity experience combining hands-on security engineering, architecture and risk governance.
Skills Required
- Strong experience in AWS and/or GCP cloud security
- Security architecture, Zero Trust, and threat modeling experience
- Application Security and DevSecOps experience
- IAM experience with SSO, OAuth 2.0, SAML, and PAM
- Security automation and CI/CD security testing using SAST, DAST, and SCA
- Infrastructure as Code experience with Terraform and Ansible
- Security risk assessment and risk management experience
- Knowledge of APRA CPS 234, CPS 230, ISO 27001, and NIST CSF
- Strong stakeholder management, consulting, and technical leadership skills
- CISSP, CISM, CCSP, or cloud security certification
What We Do
XPT Software Australia Pty Ltd is a technology consulting and software services company serving clients across banking, financial services and insurance, telecommunications, mining, retail, energy, and manufacturing. It provides software development, IT management consulting, business analysis, project and program management, infrastructure support, and offshore development through onsite-offshore delivery. The company also works with cloud computing, big data, mobile applications, UI/UX, algorithms, and IoT.
