Staff Product Security Engineer

AU - Melbourne. Posted 5 months ago

The role

You will protect applications, software, services, infrastructure, and networks. You will work across security engineering and incident response to strengthen defensive capabilities and embed security into how teams build and operate.

What you will do

Build and strengthen security controls for applications, software, services, infrastructure, and networks.
Design and deliver security improvements, detection strategies, response workflows, and cybersecurity infrastructure.
Use telemetry, threat intelligence, and forensic evidence to identify, investigate, contain, and respond to threats.
Conduct defensive operations, tactical forensics, and threat hunting.
Partner with Infrastructure, Product, and Engineering teams to embed security into applications and services.

Required qualifications

8+ years working in a security engineering or incident response role within a technology company.
In-depth expertise with at least one major cloud platform.
Strong knowledge of software development tools and infrastructure, including CI/CD tooling and pipelines.
Comprehensive understanding of common attacker tools and techniques.
Experience designing, developing, and managing infrastructure projects, processes, and standards related to the security of networks, systems, and applications.
Strong communication skills to explain technical security and software concepts to a non-technical audience.
A passion for solving complex challenges in high-growth startups.
Self-motivation and drive to learn new skills or deepen existing ones.

Nice to have

Bachelor’s degree in Cybersecurity, Computer Science, or a similar field.
Recognised cybersecurity training or certifications, such as OSCP, GIAC, or CEH.
Strong experience with Splunk and other common security monitoring tools.
Previous DevOps or SRE experience with Kubernetes.
Experience with GCP or Alibaba Cloud, with or without certification.
Experience with Okta, GSuite, and cloud-based VPN services.
Experience with Python and Java or Kotlin.
Published articles, journal papers, or blogs related to cybersecurity.

About the company

Airwallex is an AI-native financial operating system for a real-time, intelligent economy. It provides financial infrastructure for businesses across North America, Europe, the Middle East, and Asia-Pacific.