Principal Security Engineer | Cyber Security Advisor | Contract
12-month contract (extendable) in Melbourne with Australian IT & cyber security services firm The Missing Link. The senior advisor leads security architecture reviews, threat modelling, risk assessments, and embeds secure controls across AWS/GCP, IAM, and DevSecOps/CI-CD in a regulated enterprise environment.
- Compensation
- Not disclosed
- Location
- Melbourne, Victoria, Australia
- Work setup
- Not specified
- Seniority
- Principal
- Employment
- Contract
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Significant senior-level cyber security engineering or security architecture experience
- Strong AWS and/or GCP cloud security capability
- Security architecture, threat modelling and risk assessment experience
- Strong knowledge across IAM, AppSec, network security and DevSecOps
- Experience with CI/CD security, SAST, DAST, SCA and security automation
- Understanding of Terraform/IaC, Docker and Kubernetes
- Experience with modern identity platforms such as Microsoft Entra ID and/or Okta
- Strong understanding of risk-based security control design
- Experience working in highly regulated enterprise environments
- Knowledge of APRA CPS 234, CPS 230, ISO 27001, NIST CSF, Essential Eight and the Privacy Act 1988
- Strong stakeholder management and ability to influence technical and senior business stakeholders
Nice to have
- Certifications: CISSP, CISM, CCSP, AWS Security Specialty or Google Professional Cloud Security Engineer
Full description
About The Missing Link
The Missing Link is a leading Australian IT and Cyber Security services provider. We’re seeking an experienced Principal Security Engineer / Cyber Security Advisor for a 12-month contract engagement in Melbourne, with potential for extension.
This is a senior, consulting-led role combining security engineering, architecture, cloud security and cyber risk advisory within a complex enterprise environment.
About the Role
You’ll act as a trusted technical security advisor, working across engineering, architecture and business teams to deliver secure-by-design solutions and pragmatic, risk-based security controls.
The environment spans AWS/GCP, application security, IAM, DevSecOps, network security, threat modelling and governance, with a strong focus on Australian financial services regulation.
Requirements
Key Responsibilities
- Lead security architecture reviews, solution assessments and threat modelling
- Conduct comprehensive security risk assessments
- Design secure architecture patterns, controls and cloud security standards
- Provide security guidance across AWS and/or GCP
- Embed security controls into DevSecOps and CI/CD environments
- Advise across IAM, SSO, PAM and federated identity
- Develop practical, risk-based controls and manage security exceptions
- Partner with engineering, architecture, risk and business stakeholders
- Ensure solutions align with relevant regulatory and security frameworks
- Provide senior technical security leadership and mentoring
About You
You’re an experienced security practitioner with broad capability across security engineering, architecture and risk, rather than a specialist in only one security technology.
Essential Experience
- Significant senior-level cyber security engineering or security architecture experience
- Strong AWS and/or GCP cloud security capability
- Security architecture, threat modelling and risk assessment experience
- Strong knowledge across IAM, AppSec, network security and DevSecOps
- Experience with CI/CD security, SAST, DAST, SCA and security automation
- Understanding of Terraform/IaC, Docker and Kubernetes
- Experience with modern identity platforms such as Microsoft Entra ID and/or Okta
- Strong understanding of risk-based security control design
- Experience working in highly regulated enterprise environments
- Knowledge of APRA CPS 234, CPS 230, ISO 27001, NIST CSF, Essential Eight and the Privacy Act 1988
- Strong stakeholder management and the ability to influence technical and senior business stakeholders