Product Security Engineer

About this role

• Embed application security into fast-moving product delivery across Bankwest-facing technology teams.
• Work hands-on with engineers through code reviews, security testing and secure-by-design practices.
• Help teams deliver safer customer experiences by identifying risks early and improving secure engineering capability.

Do Work That Matters

At CommBank, we’re building tomorrow’s bank today. Technology is at the heart of everything we do, and security is fundamental to providing safe, secure and trusted experiences for millions of customers.

We are seeking a Product Security Engineer to join Group Security, supporting Bankwest-facing technology teams to embed security into the way software is designed, built and delivered. This is a hands-on role focused on application security, secure code review and practical security guidance across smaller, faster-moving units of work.

You’ll work closely with engineering teams to review application changes, identify risks early and help teams build secure products at speed. This is an opportunity to apply your technical skills in a progressive environment where security is part of everyday delivery, not an activity left until the end.

See yourself in our team

Group Security is part of Technology and brings together security and resilience capabilities across cyber security, protective security and business resilience, fraud technology and operations, and cyber defence. The team’s purpose is safeguarding a brighter future for all by securing the bank, protecting customers, building recovery capability and creating an admired place to work.

As part of our Product Security capability, you’ll help strengthen secure engineering practices across Bankwest-facing teams. You’ll support the shift-left approach by embedding security earlier in the development lifecycle, helping reduce risk while enabling faster and safer delivery of technology solutions.

On any given day, you will

• Perform application security assessments, including source code reviews and security testing activities.
• Review smaller units of application change and provide clear, practical security recommendations.
• Partner with engineering teams to identify vulnerabilities and support pragmatic remediation.
• Help embed secure-by-design principles throughout the software development lifecycle.
• Support product teams to balance security, customer experience and delivery outcomes.
• Contribute to secure coding practices, security standards and improved ways of working.
• Use automation and modern engineering practices to improve the efficiency and consistency of security review.
• Support the uplift of application security capability by sharing knowledge with engineers and security champions.

We are interested in hearing from people who have

• Experience in Application Security, Product Security, secure software engineering or a closely related field.
• Strong experience reviewing code, with confidence working across object-oriented programming environments.
• Understanding of secure software development practices and common application security vulnerabilities.
• Experience with source code reviews, application security testing, penetration testing or secure design reviews.
• A software engineering background with demonstrated interest or experience in cybersecurity.
• Relevant security learning, certifications, coursework or hands-on security champion experience.
• The ability to provide practical guidance to engineering teams in a clear and collaborative way.
• Curiosity about automation, AI and modern engineering practices that can improve security outcomes.

Working with us

At CommBank, we're committed to creating an accessible, inclusive and respectful workplace. If you require support or adjustments, please let us know. We welcome applications from people of all backgrounds and we're particularly committed to making a positive difference for Aboriginal and/or Torres Strait Islander Peoples. For support please contact 1800 989 696.

If this sounds like you, apply now.

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 19/08/2026

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.