Security Engineer

HomeMade, Mable, Leap in! and Mable Direct are entities under the Attain Healthtech Group of companies. While our companies are diverse, three similarities bind us: 1. We exist to create lasting, positive change across the entire care and support sector - impacting more lives, elevating standards and shaping the future of care 2. We believe in technology as an enabler 3. We’re driven by helping customers attain better outcomes This position is part of the Mable team. **About Mable** Mable is one of Australia's leading and fastest-growing healthtech platforms. As a purpose-driven company, we are where thousands of people with disability and older Australians have connected with independent support workers of their choosing and on terms that suit them. With more than 25 million hours of support facilitated since 2014, it's no wonder we have been recognised on the AFR's Top 100, Deloitte Tech Fast 50, were previously awarded Australian Growth & Technology Growth Company of the Year. By working at Mable, you will join a high productivity and dynamic team environment, leading to meaningful change in Australia's care and support sectors. To find out more, visit **About the role** We are seeking an experienced Security Engineer to help design, build, and maintain the security posture of Mable's platform and infrastructure. This is a senior individual contributor role that sits at the intersection of engineering and security - you will embed security thinking directly into how we build and operate systems, rather than sitting outside the process as an auditor or gatekeeper. The ideal candidate brings both technical depth and the ability to work cross-functionally, partnering with engineers, product, infrastructure, and leadership to ensure that security is a consideration across everything we build. You are comfortable moving between proactive security work (threat modelling, secure design, vulnerability assessment) and reactive response (incident support, remediation), and you bring a practical, risk-based mindset to both. ### Key accountabilities - Design and implement security controls across Mable's platform, applications, and infrastructure - including access controls, encryption, network segmentation, and endpoint protection - Embed security into the software development lifecycle: participate in design reviews, threat modelling sessions, and code reviews to identify and address risks early - Lead vulnerability assessments and coordinate remediation efforts across engineering teams, prioritising based on risk and business impact - Monitor systems and infrastructure for suspicious activity; support incident response including investigation, containment, and post-incident analysis - Define and maintain security standards, guidelines, and sensible defaults for engineering teams - making the secure path the easy path - Partner with Engineering Team Leads and engineers to build security literacy across squads, providing advice and guidance on secure coding practices and tooling - Contribute to the assessment and adoption of security tooling - including SIEM, vulnerability scanning, secrets management, and intrusion detection - Support compliance and risk management obligations relevant to Mable's operating environment (e.g. Australian Privacy Act, ISO 27001 alignment, Essential Eight) - Monitor the external threat landscape and emerging attack vectors; translate findings into practical recommendations for the business - Collaborate with Infrastructure Engineers on secure cloud architecture, CI/CD pipeline security, and secrets management practices ### Skills, Knowledge and Experience - 8+ years of experience in a security engineering, application security, or systems security role - Strong understanding of secure software design principles, common vulnerability classes (OWASP Top 10, CWE), and how to remediate them in a modern cloud-native environment - Hands-on experience with cloud security - AWS preferred - including IAM, network security groups, secrets management, and secure infrastructure configuration - Experience with security tooling across at least several of: SIEM, vulnerability scanners, DAST/SAST, intrusion detection, endpoint protection, and secrets management - Demonstrated ability to conduct threat modelling and security design reviews - Working knowledge of relevant compliance frameworks and privacy obligations applicable in Australia (Privacy Act, Essential Eight, ISO 27001)