Want to know if this job is worth applying to?
Sydney, New South Wales, Australia
Hybrid
We are seeking an experienced Security Engineer to help design, build, and maintain the security posture of Mable's platform and infrastructure. This is a senior individual contributor role that sits at the intersection of engineering and security - you will embed security thinking directly into how we build and operate systems, rather than sitting outside the process as an auditor or gatekeeper.
The ideal candidate brings both technical depth and the ability to work cross-functionally, partnering with engineers, product, infrastructure, and leadership to ensure that security is a consideration across everything we build. You are comfortable moving between proactive security work (threat modelling, secure design, vulnerability assessment) and reactive response (incident support, remediation), and you bring a practical, risk-based mindset to both.
Design and implement security controls across Mable's platform, applications, and infrastructure - including access controls, encryption, network segmentation, and endpoint protection
Embed security into the software development lifecycle: participate in design reviews, threat modelling sessions, and code reviews to identify and address risks early
Lead vulnerability assessments and coordinate remediation efforts across engineering teams, prioritising based on risk and business impact
Monitor systems and infrastructure for suspicious activity; support incident response including investigation, containment, and post-incident analysis
Define and maintain security standards, guidelines, and sensible defaults for engineering teams - making the secure path the easy path
Partner with Engineering Team Leads and engineers to build security literacy across squads, providing advice and guidance on secure coding practices and tooling
Contribute to the assessment and adoption of security tooling - including SIEM, vulnerability scanning, secrets management, and intrusion detection
Support compliance and risk management obligations relevant to Mable's operating environment (e.g. Australian Privacy Act, ISO 27001 alignment, Essential Eight)
Monitor the external threat landscape and emerging attack vectors; translate findings into practical recommendations for the business
Collaborate with Infrastructure Engineers on secure cloud architecture, CI/CD pipeline security, and secrets management practices
8+ years of experience in a security engineering, application security, or systems security role
Strong understanding of secure software design principles, common vulnerability classes (OWASP Top 10, CWE), and how to remediate them in a modern cloud-native environment
Hands-on experience with cloud security - AWS preferred - including IAM, network security groups, secrets management, and secure infrastructure configuration
Experience with security tooling across at least several of: SIEM, vulnerability scanners, DAST/SAST, intrusion detection, endpoint protection, and secrets management
Demonstrated ability to conduct threat modelling and security design reviews
Working knowledge of relevant compliance frameworks and privacy obligations applicable in Australia (Privacy Act, Essential Eight, ISO 27001)
