Cyber Security Engineer - (Info Sec Senior Consultant)

About this role

Job Description

What’s the Role

Internal referred to as an Information Security Senior Consultant

The Application Security Team sits within the Information Security Group (ISG) and supports all brands across the Westpac Group. The team's mission is to empower and enable engineering teams to build secure applications from inception through to delivery by providing modern security tooling, automation and guidance. In this role, you'll join a highly skilled security engineering team focused on developing innovative, scalable security solutions that reduce risk, improve developer experience and strengthen software supply chain security across the organisation. You'll have the opportunity to work with cutting-edge technologies, including AI-powered security automation, while helping shape the future of application security at Westpac.

Key Responsibilities

• Build and enhance an enterprise-scale security scanning platform across source code, container images and software artifacts, improving security coverage and detection capabilities.
• Design and develop AI-powered automation using LLMs and agent-based workflows to triage, classify and prioritise security detections at scale.
• Engineer and optimise scalable platform infrastructure, including distributed worker pipelines, message brokers, databases and secrets management systems.
• Develop custom detection rules, scanning patterns and automation to improve detection quality, reduce false positives and streamline security operations.
• Strengthen software supply chain security through dependency risk management, artifact integrity controls, SBOM generation and governance across the SDLC.
• Collaborate with developers, security engineers and technology teams to uplift application security practices and drive continuous improvement through automation and innovation.

What do I need?

• Hands-on experience with security and DevOps technologies including GitHub Advanced Security, Snyk, HashiCorp Vault, Gitleaks, Bitbucket and Artifactory.
• Advanced Python development skills with expertise in distributed systems, event-driven architectures, asynchronous processing and platform engineering.
• Hands-on experience with security technologies including GitHub Advanced Security, HashiCorp Vault, RabbitMQ, PostgreSQL, Gitleaks, TruffleHog, GitHub and Bitbucket.
• Proven experience securing software supply chains through SBOM generation, dependency management, artifact security and supply chain risk mitigation frameworks.
• Knowledge of AI and LLM technologies, leveraging tools such as GitHub Copilot, OpenAI and Claude to automate security and engineering outcomes.
• Strong stakeholder engagement, communication and problem-solving skills, with an automation-first mindset focused on scalability, continuous improvement and reducing operational effort.

Why join us?

We’re obsessed with becoming our customers' #1 banking partner for life and we’re looking for people who are passionate about helping us achieve that goal. In return, we’re committed to making Westpac the best place to work in the country. Here are just a few of the ways we’re already doing that:

• Special offers on banking products and discounts from top brands, including generous employee only mortgage rates!
• Flexible work arrangements to help you achieve a greater work/life balance, and a variety of leave options including Culture, Lifestyle and Wellbeing leave.
• Tailored learning and development opportunities to help your grow your career within the bank.
• Lots of opportunities to ‘give back’ to the Community by getting involved in our many volunteering initiatives.

Create your future today

To get started, simply click on the APPLY or APPLY NOW button

We’re all about creating a supportive and inclusive community. We welcome everyone no matter your age, gender, background, or abilities. We also provide additional support to welcome our veterans, Indigenous Australians and neurodiverse community.

If you need any adjustments during the recruitment process, you can find out more information and additional contact details by visiting the "People with Disability and/or needing Accessibility Requirements" page on our website .

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.