Senior Security Engineer (Software & Platform) (Cybersecurity)

TL;DR

Senior Security Engineer (Software & Platform): Building and maintaining secure code, architecture, and environments for AI-powered digital twins of electricity grids with an accent on automated analysis tools, defense-in-depth, and threat modeling. Focus on designing secure systems, reducing friction in security practices, and preparing for compliance audits like ISO 27001 and SOC 2 in an engineering-led way.

Sydney or Melbourne (Australia), Hybrid. Current and unrestricted Australian working rights required; no visa sponsorship.

Company

Advanced machine learning platform creating engineering-grade digital twins of electricity grids to simulate extreme weather and optimize infrastructure resilience for global utilities.

What you will do

• Secure code, architecture, and environments using static/dynamic analysis tools, dependency checks, and runtime verification.
• Design defense-in-depth across technical and people processes, participating early in product design to prevent issues.
• Bridge gaps between security policy and real practices, making secure development the path of least resistance.
• Act as a pragmatic security champion, training teams on threat modeling, secure coding, and attack vectors.
• Ensure technically sound compliance controls aligned with workflows, preparing for audits like ISO 27001/SOC 2.

Requirements

• Strong software engineering background, ideally backend/platform, with experience reviewing production code.
• Deep knowledge of common vulnerabilities (auth, crypto, injection, cloud misconfigs).
• Practical experience securing modern systems (APIs, cloud, CI/CD, containers, IAM).
• Ability to threat-model systems and reason about attacker trade-offs using automated and manual methods.
• Excellent communication to explain risks to engineers and non-engineers.
• Previous first/early security hire at startup/scale-up; Australian work rights required.

Nice to have

• Hands-on pentesting or red-team experience.
• Building internal security tools or automation.
• Familiarity with IaC and modern cloud platforms.
• Experience with AI-assisted security/code analysis tools.
• Owning/contributing to ISO 27001 or SOC 2.

Culture & Benefits

• Competitive salary and meaningful ESOP.
• Fully flexible hybrid arrangements with well-stocked office in Redfern (Sydney).
• Regular office events and a culture of innovation and mission ownership.
• Work on complex, industry-leading product making real-world impact in energy resilience.
• Diversity, belonging, and equal opportunities encouraged.