Addressmx51 is a payments-as-a-service solution for banks, non-bank acquirers, and other merchant service providers. We are building a payment platform that allows merchants to accept payments in-store, in-app and online, whilst consolidating all their data on a real-time business management dashboard.
We’re a bank grade scale-up which means we take security seriously and are able to get stuff done. We’re looking for a new Principal Security Engineer to join us and do exactly that - taking our cyber security posture to the next level!
About the role
In this role, you will be instrumental in securing the products and services we provide to our customers. For all aspects pertaining to application security, product security architecture and DevSecOps, you will be a trusted SME and lead security representative when collaborating with peers across the organisation.
We’re seeking someone who can influence and empower product and engineering teams to follow security best practice without impeding innovation and speed of software delivery. In addition to technical expertise, you’ll demonstrate the nous and soft skills essential for achieving security objectives while respecting varied perspectives and aligning with other business priorities.
Some of the responsibilities of the role include
- Act as a trusted advisor to support peers with software design and development decisions that have security implications.
- Review new products and features to ensure adherence to security best practice prior to production release.
- Perform rigorous security assessments on mx51 products and system architecture to identify and help remediate potential vulnerabilities.
- Enhance and govern automated security checks (e.g. SAST, SCA and secret scanning) in Source Control Management (SCM) and CI/CD systems.
- Facilitate regular security assurance activities e.g. penetration testing.
What we're looking for in an applicant
- Experience in multiple security disciplines such as application security, security architecture and DevSecOps.
- Capability to assess the security of web and mobile applications built on cloud platforms, such as AWS.
- Direct experience as a practitioner of penetration testing and/or secure code review.
- Experience of engaging with stakeholders such as product managers and engineering peers to collectively uplift security.
- Ability to reason about security considerations and offer practical recommendations to assist peers in taking action to address software security risks.
- Relevant certifications (e.g. OSCP, CREST or AWS).
We know this sounds like a lot! If you have experience in most but not all of these domains, we’d still love to hear from you. If you’re a seasoned software developer or solution architect with a background adjacent to security and are interested in transitioning to a full-time security role, we welcome your application!
For us, culture is the most important. As an organisation we’re growing and maturing so we’re looking for a Principal Security Engineer that can grow and mature with us.
What we offerYou will be joining an incredible team who are committed to our vision and company values. Our innovative culture gives you opportunities to make real contributions that will shape the future of the business. In addition to a fun and flexible work environment, we also offer:
- Work from overseas up to 4 weeks per year
- Flexible work practices and tools to help you set up your remote workstation
- Access to co-working facilities across 3 states
- Annual team offsite
- Social events run by our social committee
- Swap a public holiday and take an alternative day off
- Paid leave for volunteering
- Employee Share Option Plan (subject to invitation)
- Paid parental leave for primary and secondary carers
- Novated lease and salary sacrifice options
mx51 is an equal opportunity employer that is committed to creating a diverse and inclusive environment. All qualified applicants will receive consideration for this role without bias to race, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability or age.
Note: mx51 does not accept unsolicited resumes or applications from recruitment agencies.
What is your desired annual base salary? *
Do you have the right to work in the country in which you’ve applied to? Please provide detailed information about your right to work below (e.g. residency, citizenship, visa type & number etc): *
If successful, how long would you need before you'd be able to begin a new job? *
Please select
