Senior Security Engineer - DevSecOps

Job description

What you’ll be doing As a Senior DevSecOps Engineer, you'll embed security automation into our infrastructure and CICD pipelines to secure our build and run. As a technical SME, you will play a hands-on role in shifting security left and in empowering engineering teams with secure components and patterns. Standardize security practice through Infrastructure-as-code and services orchestration in AWS. Secure CI/D pipelines and deployment practices. Automate VulnOps and secure dependencies management. Build observability and monitoring capabilities on agentic systems with OTEL. Contribute to incident response efforts. What we’re looking for Demonstrated experience in software engineering/platform engineering and security engineering. Experience implementing end-to-end orchestration and secure patterns in AWS. Experience designing and maintaining CICD gates across the build, release and run phases. Exposure to secure dependency management best practices. Exposure to vulnerabilities remediation at run time. Hands-on practical use of AI for security, high degree of curiosity for novel threats and agentic systems. Team player with ability to influence and multiply what good looks like across technical teams. We know not everyone will meet every requirement, and that’s okay. If you’re excited about the role and believe you can make a difference, we’d love to hear from you. A few other things we want you to know... As an equal opportunity employer, carsales welcomes applications from individuals of all backgrounds, identities, abilities, and life experiences. We are committed to fostering a diverse and inclusive workplace where everyone feels valued and supported. If you have a disability or require adjustments to participate fully in the recruitment process, please let us know - we’re here to support you. We understand the importance of work-life balance and offer flexible working arrangements, including part-time options. If you’d like to explore this, just ask during the process. We’re also a proud Circle Back Initiative employer, which means we commit to responding to every applicant. Successful candidates joining the carsales team will need to complete a National Police Record check and must have full-time Australian working rights. So come join us - because every role plays a vital part in our journey toward something big! Are you ready to be a big part of something big? At carsales, we’re all about making buying and selling a great experience. Since 1997, we’ve been evolving with the new economy to help people choose how they move - today and tomorrow. When it comes to your career, we want to offer meaningful opportunities that empower you to make a lasting impact. But for that to happen, we strive to feel small - small enough to stay agile, learn across teams, and connect authentically with each other. With a vision to be the global leader in online vehicle marketplaces, we’re transforming how people buy and sell across the world. We discover new ideas and bring them to life. We continue to grow, and we continue to evolve and we’re not afraid to take bold steps to get there. As a Senior DevSecOps engineer, you will operate at the junction of software development and security, helping our platform engineering and application security teams to standardize and automate at scale how we build, deploy and run cloud applications and agentic systems. This role is suited for a builder who can design, implement, and mature solutions across complex environments. This position sits within our Cyber Security team and offers a high level of autonomy to operate and a direct influence into the engineering roadmap. We embrace hybrid working - combining the flexibility of remote work with the energy and connection of in-person collaboration. We champion flexibility, offer a range of policies, and leave options to support your wellbeing. What’s on offer Recognition as one of Australia’s Best Workplaces™ by Great Place to Work®, a Family Friendly Workplace, a WORK180 endorsed employer. A highly engaged, collaborative team where you’ll learn from exceptional talent. 24 weeks paid parental leave for primary caregivers, four weeks for secondary caregivers, and six weeks paid gender-affirming care leave. Regular hackathons, continuous learning opportunities, and wellbeing initiatives that support your mental, emotional, and physical health.