Security Engineer

Team: Computing Engineering

Location: Sydney

Commitment: Full-Time / Permanent

Workplace Type: onsite

What you’ll be doing:

Reporting to the Engineering Manager for Infrastructure, you’ll play a hands-on role in ensuring we deliver the highest security standards for Q-CTRL products and maintain the trust our customers place in us.
Strengthening the security of the Q-CTRL platform through contribution to key systems such as Kubernetes clusters, cloud networking, Zero Trust network architectures and firewalls.
Consistently upholding compliance with security frameworks through the improvement of systems and processes. This includes access control mechanisms, data management and security guardrails.
Applying knowledge in forensics and incident response to triage incidents and applying expertise to improve alerting.
Refining and maturing our vulnerability management systems in order to improve key security metrics for Q-CTRL.
Other duties within the Employee's skills and experience, or with reasonable training.

Ideally you’ll have:

Previous experience in DevSecOps or DevOps with a dedicated security engineering focus.
Cloud networking and Kubernetes experience, including knowledge of ZTNA and secure network access.
Experience with firewall technologies, at both the cloud (e.g., AWS, GCP, Azure) and application levels.
Experience working with SIEM/SOC tooling such as Splunk or Microsoft Sentinel to identify and triage security alerts.

It would be fantastic if you have these skills/experience but not essential:

xperience maintaining a vulnerability management system, including running threat modelling sessions and maintaining risk registers.
Experience with Kubernetes runtime security tooling such as Falco or Sysdig.
Relevant security or Kubernetes certifications, such as Certified Kubernetes Security Specialist (CKS) or Offensive Security Certified Professional (OSCP).
Experience with AI-assisted security scanning or penetration testing.
Red teaming experience, particularly within cloud or AWS environments.
Experience using open-source observability tooling such as OpenTelemetry and Grafana to set up security alerting and monitoring.
Hands-on experience hardening Linux operating systems and container images.