Senior Security Engineer - DevSecOpscarsales · Melbourne, VIC, au

Senior Security Engineer - DevSecOps

🗓️ Posted 2026-09-03 Melbourne, VIC, au Full-time Hybrid ICT
💰 Salary Not shared 📊 Market A$10,833–A$15,000/mo

About the Company

At carsales, we're all about making buying and selling a great experience. Since 1997, we've been evolving with the new economy to help people choose how they move - today and tomorrow. With a vision to be the global leader in online vehicle marketplaces, we're transforming how people buy and sell across the world. We discover new ideas and bring them to life. We continue to grow, and we continue to evolve and we're not afraid to take bold steps to get there. We embrace hybrid working - combining the flexibility of remote work with the energy and connection of in-person collaboration. We champion flexibility, offer a range of policies, and leave options to support your wellbeing. As an equal opportunity employer, carsales welcomes applications from individuals of all backgrounds, identities, abilities, and life experiences. We are committed to fostering a diverse and inclusive workplace where everyone feels valued and supported.

About the Role

As a Senior DevSecOps engineer, you will operate at the junction of software development and security, helping our platform engineering and application security teams to standardize and automate at scale how we build, deploy and run cloud applications and agentic systems. This role is suited for a builder who can design, implement, and mature solutions across complex environments. This position sits within our Cyber Security team and offers a high level of autonomy to operate and a direct influence into the engineering roadmap.

Responsibilities

  • ● Embed security automation into our infrastructure and CICD pipelines to secure our build and run.
  • ● Play a hands-on role in shifting security left and in empowering engineering teams with secure components and patterns as a technical SME.
  • ● Standardize security practice through Infrastructure-as-code and services orchestration in AWS.
  • ● Secure CI/D pipelines and deployment practices.
  • ● Automate VulnOps and secure dependencies management.
  • ● Build observability and monitoring capabilities on agentic systems with OTEL.
  • ● Contribute to incident response efforts.

Requirements

  • ● Demonstrated experience in software engineering/platform engineering and security engineering.
  • ● Experience implementing end-to-end orchestration and secure patterns in AWS.
  • ● Experience designing and maintaining CICD gates across the build, release and run phases.
  • ● Exposure to secure dependency management best practices.
  • ● Exposure to vulnerabilities remediation at run time.
  • ● Hands-on practical use of AI for security, high degree of curiosity for novel threats and agentic systems.
  • ● Team player with ability to influence and multiply what good looks like across technical teams.

Benefits

  • ● Recognition as one of Australia's Best Workplaces by Great Place to Work .
  • ● Recognition as a Family Friendly Workplace.
  • ● Recognition as a WORK180 endorsed employer.
  • ● A highly engaged, collaborative team where you'll learn from exceptional talent.
  • ● 24 weeks paid parental leave for primary caregivers.
  • ● Four weeks paid parental leave for secondary caregivers.
  • ● Six weeks paid gender-affirming care leave.
  • ● Regular hackathons.
  • ● Continuous learning opportunities.
  • ● Wellbeing initiatives that support your mental, emotional, and physical health.
  • ● Flexible working arrangements, including part-time options.