Lead Security Engineer
- Lead the integration of security practices into the software development lifecycle.
- Develop security standards and conduct threat modelling exercises.
- Provide technical leadership across cloud, application, and infrastructure security initiatives.
12-Month Contract + 2 x 12-Month Extensions | Hybrid | ACT, NSW or QLD
Your new company
Join a nationally significant digital transformation program delivering secure and innovative healthcare solutions that impact millions of Australians. Working within a high-performing Cyber Security function, you'll play a key role in strengthening security capabilities, embedding DevSecOps practices, and helping build a modern defensible architecture across critical digital platforms.
Your new role
As the Lead Security Engineer, you will work closely with cyber, engineering and delivery teams to embed security into every stage of the software development lifecycle. You will champion secure-by-design principles, drive DevSecOps adoption, and provide technical leadership across cloud, application and infrastructure security initiatives.Key responsibilities include:
- Developing security standards, reference architectures and reusable security patterns
- Embedding security controls and automated testing into CI/CD pipelines
- Conducting threat modelling exercises and translating findings into practical security controls
- Supporting Azure DevOps and AWS delivery teams with security tooling and best practices
- Performing security reviews, vulnerability assessments and control validation activities
- Developing and implementing application security capabilities including SAST, DAST and secure coding practices
- Building security performance dashboards and reporting capabilities
- Driving continuous improvement initiatives across DevSecOps and software supply chain security
- Influencing stakeholders and fostering a collaborative security-first culture
What you'll need to succeed
- Hold NV1 security clearance, or Baseline Security Clearance
- Demonstrated experience as a Security Engineer, DevSecOps Engineer, Application Security Engineer or similar senior security role
- Minimum 3 years' experience working alongside DevOps or software development teams
- Strong experience building and securing CI/CD pipelines
- Experience with Azure DevOps and/or AWS tooling and platforms
- Hands-on experience implementing security controls across cloud, infrastructure, applications, networks and endpoints
- Strong understanding of threat modelling, vulnerability management and secure-by-design principles
- Excellent stakeholder engagement and communication skills
- Formal Cyber Security, Software Development or DevOps qualifications highly regarded
What you'll get in return
- 12-month contract with long-term extension potential
- Opportunity to work on nationally significant digital initiatives
- Hybrid working arrangements
- Collaborative and highly skilled cyber security environment
- Competitive daily rate
What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.
If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion on your career.
#3019781
We vet all employer accounts and do our best to keep job ads safe, but scams can still occur. Be cautious when sharing personal information — never provide financial details or make payments during the application process. For extra security, use the Apply button on our site when proceeding.
Skills
0 of 12 matchedHays