" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003ePrincipal Security Engineer - Platform and Cloud\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"20373\"\u003e IT \u0026amp; Engineering \u003c/li\u003e \u003cli data-id=\"20374\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"20375\"\u003e Sydney \u003c/li\u003e \u003cli data-id=\"20376\"\u003e Permanent / Full Time \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 16/10/2026 \u003c/p\u003e \u003c/div\u003e \u003cdiv class=\"description\"\u003e About Us:\u0026nbsp;\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e At Ubank, we empower the digital generation to achieve financial success. Think of us as your daily money companion, offering a unified view of your finances with smart features and real-time insights. Save more, track spending, and achieve home ownership faster with Ubank.\u0026nbsp;\u0026nbsp;\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e \u003cstrong\u003eThe Why:\u0026nbsp;\u0026nbsp;\u003c/strong\u003e\u003cbr\u003e\u003cbr\u003eThe \u003cstrong\u003ePrincipal Security Engineer (Platform \u0026amp; Cloud)\u003c/strong\u003e is the hands-on security engineer who designs and builds the platform-level controls, libraries, and automation that make the secure path the default path across ubank\u0027s cloud-native environment. This role owns the security engineering strategy for Kubernetes, CI/CD pipelines, cloud IAM, and container runtime protection \u0026ndash; writing production code daily to deliver paved-path solutions that product squads adopt by choice, not by mandate. \u003cbr\u003e\u003cbr\u003eWorking within the Security domain of ubank\u0027s Technology group, this role partners closely with platform, infrastructure, and product engineering teams to embed security into the developer experience.\u003cbr\u003e\u003cbr\u003e\u0026nbsp;\u0026nbsp;\u003cbr\u003e \u003cstrong\u003eKey Responsibilities:\u0026nbsp;\u0026nbsp;\u003c/strong\u003e\u003cbr\u003e\u003cbr\u003ePlatform Security Engineering\u003cbr\u003e \u003cul\u003e \u003cli\u003eDesign and build admission controllers, policy engines, and enforcement mechanisms that make secure defaults automatic across the Kubernetes platform\u003c/li\u003e \u003cli\u003eDevelop and maintain security middleware libraries and SDKs that product squads integrate to handle authentication, authorisation, and secrets management\u003c/li\u003e \u003cli\u003eImplement container supply chain controls including image signing, provenance verification, and vulnerability gating integrated into CI/CD pipelines\u003c/li\u003e \u003c/ul\u003e Cloud Security Architecture\u003cbr\u003e \u003cul\u003e \u003cli\u003eDefine and implement cloud IAM patterns, account-level security baselines, and network boundary controls across multi-account cloud environments\u003c/li\u003e \u003cli\u003eDesign service-to-service authentication and workload identity strategies that standardise zero-trust principles across microservices\u003c/li\u003e \u003c/ul\u003e Security Automation \u0026amp; Tooling\u003cbr\u003e \u003cul\u003e \u003cli\u003eBuild automated security testing and validation pipelines that provide continuous assurance without manual intervention\u003c/li\u003e \u003cli\u003eDevelop runtime security detection capabilities using modern tooling such as eBPF-based observability and behavioural analysis\u003c/li\u003e \u003cli\u003eImplement security-as-code patterns that generate compliance evidence as a byproduct of engineering workflows\u003c/li\u003e \u003c/ul\u003e Threat Modelling \u0026amp; Capability Uplift\u003cbr\u003e \u003cul\u003e \u003cli\u003eFacilitate threat modelling workshops with platform and product engineering squads, teaching teams to identify and mitigate risks independently\u003c/li\u003e \u003cli\u003eBuild and publish reference implementations, runbooks, and golden-path examples that encode security patterns into reusable, adoptable assets\u003c/li\u003e \u003c/ul\u003e Technical Strategy \u0026amp; Standards\u003cbr\u003e \u003cul\u003e \u003cli\u003eDefine the security engineering roadmap for platform and cloud, aligning technical investment with organisational risk priorities\u003c/li\u003e \u003cli\u003eSet security standards for deployment pipelines, container registries, and cloud resource provisioning \u0026ndash; making the secure way the easy way\u003c/li\u003e \u003cli\u003eEvaluate and introduce modern security technologies and approaches, ensuring ubank\u0027s security posture evolves with the threat landscape\u003c/li\u003e \u003c/ul\u003e \u0026nbsp; Stakeholder Engagement \u0026amp; Collaboration\u003cbr\u003e \u003cul\u003e \u003cli\u003ePartner with platform and infrastructure engineering teams to embed security controls natively into shared services and developer tooling\u003c/li\u003e \u003cli\u003eEngage with product engineering squads to understand developer workflows and ensure security tooling improves \u0026ndash; not impedes \u0026ndash; delivery velocity\u003c/li\u003e \u003cli\u003eProvide security engineering guidance to architecture forums and design reviews, contributing production-ready solutions rather than theoretical recommendations\u003c/li\u003e \u003c/ul\u003e Regulatory \u0026amp; Risk Alignment\u003cbr\u003e \u003cul\u003e \u003cli\u003eEnsure platform and cloud security controls satisfy APRA CPS 234 and related prudential obligations through engineering-led assurance\u003c/li\u003e \u003c/ul\u003e Collaborate with risk and compliance teams to translate regulatory requirements into automated, auditable technical controls\u0026nbsp;\u003cbr\u003e \u003cbr\u003e\u003cbr\u003e\u003cstrong\u003eYour Experience:\u0026nbsp;\u003c/strong\u003e\u0026nbsp;\u003cbr\u003e \u003cul\u003e \u003cli\u003e10+ years of hands-on software or security engineering experience, with at least 3 years focused on platform security, cloud security, or infrastructure security in a senior or principal capacity.\u003c/li\u003e \u003cli\u003eDemonstrated experience designing and building security controls for Kubernetes-based platforms, including admission controllers, pod security enforcement, network policy, and workload identity.\u003c/li\u003e \u003cli\u003eProven track record of shipping reusable security libraries, middleware, or automation that product engineering teams adopt as the default \u0026ndash; not writing policy documents, but writing code.\u003c/li\u003e \u003cli\u003eExtensive experience securing CI/CD pipelines and container supply chains, including image provenance, vulnerability scanning integration, and build-time policy enforcement.\u003c/li\u003e \u003cli\u003eExperience in regulated financial services, payments, or critical infrastructure environments is highly desirable.\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e Candidates would able to bring in:\u003c/li\u003e\u003cli\u003eKubernetes admission control and policy engine development (OPA/Gatekeeper, Kyverno)\u003c/li\u003e \u003cli\u003eCloud IAM architecture and multi-account security posture management\u003c/li\u003e \u003cli\u003eContainer supply chain security and image provenance (Sigstore, Cosign)\u003c/li\u003e \u003cli\u003eSecurity middleware and SDK development for microservice frameworks\u003c/li\u003e \u003cli\u003eThreat modelling facilitation and engineering capability uplift\u003c/li\u003e \u003cli\u003eRuntime security detection and response (eBPF, Falco, or equivalent)\u003c/li\u003e \u003c/ul\u003e \u003cbr\u003e\u003cstrong\u003eWhy Ubank?\u0026nbsp;\u003c/strong\u003e\u0026nbsp;\u003cbr\u003e \u003cul\u003e \u003cli\u003eInnovation with impact:\u0026nbsp;From meaningful work to amazing benefits, we equip you with the tools and support to drive real change - so your ideas\u0026nbsp;don\u0026rsquo;t\u0026nbsp;just stay ideas, they become impact.\u0026nbsp;\u003c/li\u003e \u003cli\u003eCollaborative,\u0026nbsp;supportive\u0026nbsp;\u0026amp; fun:\u0026nbsp;We believe innovation is a team sport. It comes from a special kind of culture\u0026nbsp;that\u0026rsquo;s\u0026nbsp;highly collaborative and gives people the support they need to thrive.\u0026nbsp;\u003c/li\u003e \u003cli\u003eBuild something great:\u0026nbsp;Ubank is where ambition meets opportunity. We\u0026nbsp;don\u0026rsquo;t\u0026nbsp;just talk about change - we give you the tools, trust, and support to make it happen.\u0026nbsp;\u003c/li\u003e \u003cli\u003eFreedom to be yourself:\u0026nbsp;We celebrate individuality and give you the flexibility to work in ways that suit your style. Our hybrid working model lets you balance connection and autonomy.\u0026nbsp;\u003c/li\u003e \u003cli\u003eAccelerate your Career:\u0026nbsp;With clear paths for career development, your potential\u0026nbsp;won\u0026rsquo;t\u0026nbsp;just be\u0026nbsp;recognised,\u0026nbsp;it\u0026rsquo;ll\u0026nbsp;be accelerated.\u0026nbsp;\u003c/li\u003e \u003c/ul\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e We acknowledge the Traditional Custodians of our local area.\u0026nbsp;\u0026nbsp;\u0026nbsp;\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e \u003cstrong\u003eThis Sydney-based permanent role requires Australian or New Zealand citizenship or permanent residency.\u0026nbsp;\u0026nbsp;\u0026nbsp;\u003c/strong\u003e\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e We welcome applicants\u0026nbsp;of\u0026nbsp;all backgrounds, and our Talent team is excited to\u0026nbsp;connect with\u0026nbsp;you.\u0026nbsp;\u0026nbsp;\u0026nbsp;\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e Apply now with your CV and explore this exciting opportunity!\u0026nbsp;\u003cbr\u003e \u0026nbsp;\u0026nbsp;\u003cbr\u003e Please note,\u0026nbsp;we\u0026rsquo;re\u0026nbsp;not accepting unsolicited candidate submissions from recruitment agencies. We\u0026nbsp;work\u0026nbsp;with a dedicated panel of partners, so kindly ask agencies not to contact Ubank team members directly. \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"931217\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "