Job Description

Senior Security Engineer:

About the role:
You are a problem solver with deep expertise in cyber security engineering, security design, and technical risk. You bring a strong ability to translate complex threats into practical, scalable security controls embedded directly into engineering delivery.

At Commonwealth Bank, our Cyber Security team is one of the most advanced in Australia, operating at scale across cloud, payments, and digital banking platforms. Together, we protect the Group, its customers, and the broader community.

Your business:

Cyber Security plays a critical role in protecting the Group from evolving cyber threats by embedding security into the design, build, and operation of all technology services. This is achieved by integrating security engineering into the full software development lifecycle and aligning to Group policies, standards, and regulatory obligations.

Your team:
You will be part of the Security Engineering team, operating within a Secure by Design and Devsecops model, where security is embedded early and continuously across delivery.

The team:

• Partners closely with engineering squads, architecture, and product teams
• Drives security design, threat modelling, and control implementation
• Enables scalable security through patterns, guardrails, and automation
• Uplifts engineering capability and security maturity across domains

Your impact & contribution:
As a Senior Security Engineer , you will operate as a hands-on security practitioner embedded within delivery domains (e.g. Retail Banking), accountable for driving secure outcomes end-to-end.

Do Work that matters:

• Provide security architecture and design guidance across the full SDLC, ensuring secure outcomes by design
• Lead threat modelling, security design reviews, and technical risk assessments, identifying threats, controls, and mitigation strategies
• Embed security into Devsecops and CI/CD pipelines, enabling teams to build and run secure services end-to-end
• Develop and promote security patterns, guardrails, and reusable controls to scale security across domains
• Partner with engineering, architecture, and product teams to uplift security maturity and influence design decisions
• Ensure solutions align with Group policies, security standards, and regulatory obligations, including control design and effectiveness
• We are interested in people who
• Bring strong experience across security engineering and architecture in large-scale, distributed environments, and can influence and deliver secure solutions in modern engineering ecosystems.

Skills & experience:
Core capabilities:

• Strong experience in security architecture, threat modelling, and secure design
• Deep understanding of AI security, Devsecops, CI/CD security, and modern engineering practices
• Ability to design and implement scalable security controls and guardrails
• Strong knowledge of cloud security (AWS and/or Azure)

Advertising End Date: 11/08/2026