Security Engineer

Design and implement security controls across Mable's platform, applications, and infrastructure - including access controls, encryption, network segmentation, and endpoint protection

Embed security into the software development lifecycle: participate in design reviews, threat modelling sessions, and code reviews to identify and address risks early

Lead vulnerability assessments and coordinate remediation efforts across engineering teams, prioritising based on risk and business impact

Monitor systems and infrastructure for suspicious activity; support incident response including investigation, containment, and post-incident analysis

Define and maintain security standards, guidelines, and sensible defaults for engineering teams - making the secure path the easy path

Partner with Engineering Team Leads and engineers to build security literacy across squads, providing advice and guidance on secure coding practices and tooling

Contribute to the assessment and adoption of security tooling - including SIEM, vulnerability scanning, secrets management, and intrusion detection

Support compliance and risk management obligations relevant to Mable's operating environment (e.g. Australian Privacy Act, ISO 27001 alignment, Essential Eight)

Monitor the external threat landscape and emerging attack vectors; translate findings into practical recommendations for the business

Collaborate with Infrastructure Engineers on secure cloud architecture, CI/CD pipeline security, and secrets management practices

8+ years of experience in a security engineering, application security, or systems security role

Strong understanding of secure software design principles, common vulnerability classes (OWASP Top 10, CWE), and how to remediate them in a modern cloud-native environment

Hands-on experience with cloud security - AWS preferred - including IAM, network security groups, secrets management, and secure infrastructure configuration

Experience with security tooling across at least several of: SIEM, vulnerability scanners, DAST/SAST, intrusion detection, endpoint protection, and secrets management

Demonstrated ability to conduct threat modelling and security design reviews

Working knowledge of relevant compliance frameworks and privacy obligations applicable in Australia (Privacy Act, Essential Eight, ISO 27001)