_{11th September, 2025}

We are seeking a skilled DevSecOps Engineer to join a technology team in delivering secure, scalable, and resilient platforms. 
  
As part of a regulated industry, you will help embed compliance, risk management, and security controls into our CI/CD pipelines, cloud platforms, and infrastructure. 
  
Key Responsibilities 

• Embed automated security checks and tooling into CI/CD pipelines
• Implement container and dependency scanning, static/dynamic code analysis, and vulnerability management
• Work with developers to remediate risks early in the lifecycle
• Secure cloud deployments following insurance industry compliance requirements (e.g., APRA CPS 234, ISO 27001)
• Manage IAM, secrets, encryption, and key management solutions
• Apply zero-trust principles to infrastructure and networking
• Build secure, automated infrastructure using IaC (Terraform, Ansible, CloudFormation)
• Monitor systems for performance, availability, and security events
• Partner with security, risk, compliance, and audit teams to align with regulatory standards
• Support regular penetration tests, red-team exercises, and remediation plans

  
Skills & Experience 

• Proficiency in CI/CD tools (Jenkins, GitLab CI, Azure DevOps, ArgoCD)
• Strong scripting/coding (Python, Bash, Go, or similar)
• Experience with containerization and orchestration (Docker, Kubernetes)
• Knowledge of cloud-native security and IaC security scanning
• Familiarity with SIEM, SOC, and security monitoring tools
• Hands-on experience with vulnerability management, SAST, DAST, and dependency scanning tools
• Understanding of data privacy and regulatory frameworks (e.g., APRA, GDPR, PCI-DSS, HIPAA)

  

Apply For Job