Cybersecurity DevOps Engineer - 12 Months Fixed Term
On-siteSydney, New South Wales, Australia or Adelaide, South Australia, Australia
Job Summary
Design and implement enterprise DevSecOps practices across development and infrastructure teams by building secure CI/CD pipelines with automated security controls. Administer GitHub repositories and workflows while enforcing Policy as Code to ensure compliance with organizational standards. Integrate security tooling including SAST, software composition analysis, and vulnerability scanning into delivery platforms. Automate security assurance activities such as peer review enforcement and branch protections, and establish controls to detect and remediate configuration drift. Work with developers and security specialists to adopt secure software development lifecycle practices and uplift DevSecOps capabilities across cloud and on-premises environments.
Required Qualifications
- AU Citizens and Residents Only
- 5+ years' experience in DevOps, DevSecOps, Platform Engineering, Security Engineering, Site Reliability Engineering or a similar role
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Software Engineering or related discipline
- Strong understanding of modern DevSecOps principles and secure software development lifecycle (SSDLC) practices
- Demonstrated experience designing and supporting CI/CD pipelines in enterprise environments
- Strong experience with GitHub, GitHub Actions and repository governance practices
- Hands-on experience implementing Infrastructure as Code using technologies such as Terraform, Bicep, CloudFormation or equivalent
- Experience implementing and maintaining Policy as Code controls and automated compliance frameworks
- Experience integrating security controls into software delivery pipelines
- Experience working with application security tooling including SAST, software composition analysis, secret detection and vulnerability management platforms
- Strong understanding of cloud security principles across Azure, AWS and GCP
- Experience designing and implementing automation solutions that improve operational efficiency and security outcomes
- Experience identifying, monitoring and remediating configuration drift across infrastructure environments
- Strong knowledge of cybersecurity principles, identity security, infrastructure security and cloud security
- Familiarity with security frameworks including ISO 27001, NIST CSF, ACSC Essential Eight, MITRE ATT&CK and government security frameworks
- Strong analytical, troubleshooting and problem-solving skills
- Excellent stakeholder engagement, communication and collaboration skills
- Ability to mentor team members and promote DevSecOps best practices across engineering teams
- Commercial awareness with an understanding of project delivery, operational outcomes and continuous improvement
- Full Time, 12 Months Fixed-Term Position
Desired Qualifications
- Experience with Aikido or similar application security platforms
- Experience implementing secure software supply chain programmes
- Experience with Open Policy Agent (OPA), Azure Policy, HashiCorp Sentinel or equivalent Policy as Code technologies
- Experience implementing repository governance at scale
- Experience using automation and orchestration platforms such as n8n, GitHub Actions, Power Automate or similar technologies
- Experience managing enterprise GitHub environments
- Experience with software assurance activities including SBOM generation and dependency management
- Experience within a managed services or Tier 2 service provider environment
- Cloud certifications from AWS, Microsoft Azure or Google Cloud
- Security certifications such as CISSP, CISM, CCSP, CSSLP, GCSA or relevant SANS certifications
- Experience with container security, Kubernetes and cloud-native security controls
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.