Staff Security Engineer
About the role
You are a highly skilled security engineer with deep expertise across cyber security engineering, security design and secure software delivery. You thrive on solving complex security challenges, influencing technical direction through expertise and building practical security solutions that scale across large, distributed environments.
At Commonwealth Bank, our Cyber Security team is one of the most advanced in Australia, operating at scale across cloud, payments and digital banking platforms. Together, we protect the Group, its customers and the broader community.
See yourself in our team
Group Security is part of Technology and brings together security and resilience capabilities spanning cyber security, cyber defence, fraud technology, protective security and business resilience. Our purpose is safeguarding a brighter future for all by securing the Bank, protecting customers and delivering best-in-class security outcomes through governance, protection, detection, response and recovery.
You will be part of the Security Engineering team, operating within a Secure by Design and Devsecops model where security is embedded early and continuously across delivery.
The team:
Partners closely with engineering squads, architects and technology leaders across Group security platforms
Drives security design, threat modelling and control implementation
Enables scalable security through automation, guardrails and engineering patterns
Uplifts engineering capability and security maturity across the domain
Influences secure engineering practices across multiple squads and platforms
Do work that matters
As a Staff Security Engineer, you will be a highly influential individual contributor, driving technical direction and engineering excellence through deep expertise and hands-on delivery.
We are interested in hearing from people who:
Lead complex cyber risk assessments, evaluate control effectiveness, and provide risk-informed recommendations that balance security, customer outcomes, resilience, and delivery objectives.
Define and drive risk assessment approaches, security control standards, and decision frameworks that enable consistent risk management across Group Security platforms.
Lead the design and implementation of scalable security controls, guardrails and automation that enable secure software delivery at scale
Solve complex security engineering challenges spanning application security, cloud security, DevSecOps and secure platform design
Define and evolve reusable security patterns, standards and engineering practices adopted across multiple squads
Partner with engineers, architects and technology leaders to influence technical decisions and deliver secure customer outcomes
Lead threat modelling, security design reviews and technical risk assessments for complex initiatives
Champion Secure by Design principles by embedding security across the software development lifecycle
Act as a technical leader within the engineering community, mentoring engineers and uplifting security engineering capability across the domain
Balance security, customer outcomes, resilience and delivery velocity when solving challenging engineering problems
Drive continuous improvement of security engineering practices, controls and automation capabilities
Skills & experience
Core capabilities
Deep expertise across security engineering, secure design and technical risk management within large-scale distributed environments
Strong experience designing, implementing and operating security controls embedded within modern engineering ecosystems
Advanced understanding of AI security, application security, DevSecOps, CI/CD security and secure software delivery practices
Strong knowledge of cloud security across AWS and/or Azure environments
Experience defining and evolving security standards, patterns, guardrails and reusable controls at scale
Proven ability to solve complex and ambiguous security engineering challenges through pragmatic, risk-informed decision making
Strong stakeholder engagement skills with the ability to influence engineers, architects and technology leaders
A track record of driving engineering excellence and uplifting capability through technical leadership, mentoring and coaching.
What we value
Strong judgement and risk-based decision making in complex and ambiguous environments.
Ability to articulate technical risk and control effectiveness to both technical and non-technical audiences.
Strong system design, security architecture and threat modelling expertise
End-to-end ownership of security outcomes
Deep technical problem-solving capability
Focus on secure software delivery, resilience and engineering excellence
A passion for mentoring others and raising engineering standards
The ability to influence through expertise, collaboration and technical leadership
If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.
We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.
Advertising End Date: 10/08/2026
