DevSecOps Engineer

DevSecOps Engineer | AWS / GCP Location: Brisbane (Hybrid) | Permanent | Must have PR OR Citizenship Are you a cloud security professional who enjoys sitting at the intersection of engineering and security? We're partnering with a well-established Australian technology business that's continuing to invest heavily in its cloud platform and security capabilities. They're looking for a DevSecOps Engineer to help strengthen security across their cloud environments while working closely with engineering and infrastructure teams. This is a hands-on role where you'll combine cloud engineering, security operations, automation, and DevSecOps practices to improve the organisation's overall security posture. What You'll Be Doing Maintain and secure cloud infrastructure, ensuring environments remain compliant with security standards and operational SLAs.Monitor security events, logs and alerts, investigating potential threats and responding to incidents proactively.Deliver security-focused infrastructure initiatives that reduce risk while supporting business objectives.Design, implement and maintain security controls across cloud infrastructure, networks and applications.Perform vulnerability assessments and support penetration testing activities.Embed security throughout the software development lifecycle, partnering closely with engineering teams to promote secure development practices.Drive automation across security and operational processes to reduce manual effort and improve efficiency.Contribute to Business Continuity and Disaster Recovery planning, ensuring resilient cloud platforms.Mentor engineers and promote security best practices across the wider technology team. What We're Looking For 5+ years' experience in DevOps, Platform Engineering or Cloud Engineering with strong exposure to AWS and/or GCP.Commercial experience building and securing cloud infrastructure.Experience with security tooling such as SIEM, IDS/IPS, vulnerability management, endpoint security or log management platforms.Strong Kubernetes (EKS), Docker and Terraform experience.Experience with Python or another scripting language for automation.Solid CI/CD experience and a security-first approach to software delivery.Understanding of security frameworks such as NIST, ISO 27001, Essential Eight or similar compliance standards.Strong communication skills and the ability to work closely with both technical and non-technical stakeholders. Nice to Have Industry certifications such as CISSP, CCSP, AWS Security Specialty, AWS Solutions Architect Professional, Security+, or equivalent cloud security certifications.Experience supporting enterprise SaaS environments and identity/security platforms.Exposure to AI-assisted development tools or security automation. Why Apply? Work on modern cloud infrastructure using AWS and Kubernetes.Join a collaborative engineering team where security is treated as an engineering function rather than an afterthought.Opportunity to influence cloud security strategy while remaining hands-on technically.Flexible hybrid working and genuine career development opportunities.