jobapplier

Principal Security Engineer | Cyber Security Advisor | Contract

The Missing Link

Skills

Required

  • AWS / GCP
  • cloud security
  • cyber security engineering / security architecture
  • threat modelling
  • IAM
  • DevSecOps
  • network security
  • AppSec
  • CI/CD security
  • Terraform / IaC
  • Docker
  • Kubernetes

Preferred

  • CISSP
  • CISM
  • CCSP
  • AWS Security
  • controls
  • CI/CD
  • security architecture reviews
  • solution assessments
  • secure architecture patterns

The Missing Link is a leading Australian IT and Cyber Security services provider. We’re seeking an experienced Principal Security Engineer / Cyber Security Advisor for a 12-month contract engagement in Melbourne, with potential for extension.

This is a senior, consulting-led role combining security engineering, architecture, cloud security and cyber risk advisory within a complex enterprise environment.

You’ll act as a trusted technical security advisor, working across engineering, architecture and business teams to deliver secure-by-design solutions and pragmatic, risk-based security controls.

The environment spans AWS/GCP, application security, IAM, DevSecOps, network security, threat modelling and governance, with a strong focus on Australian financial services regulation.

Responsibilities

  • Lead security architecture reviews, solution assessments and threat modelling
  • Conduct comprehensive security risk assessments
  • Design secure architecture patterns, controls and cloud security standards
  • Provide security guidance across AWS and/or GCP
  • Embed security controls into DevSecOps and CI/CD environments
  • Advise across IAM, SSO, PAM and federated identity
  • Develop practical, risk-based controls and manage security exceptions
  • Partner with engineering, architecture, risk and business stakeholders
  • Ensure solutions align with relevant regulatory and security frameworks
  • Provide senior technical security leadership and mentoring

Requirements

  • The Missing Link · Melbourne, Australia (Hybrid) · Contract · Posted 2026-10-22
  • You’re an experienced security practitioner with broad capability across security engineering, architecture and risk, rather than a specialist in only one security technology.
  • Significant senior-level cyber security engineering or security architecture experience
  • Strong AWS and/or GCP cloud security capability

Security architecture, threat modelling and risk assessment experience

  • Strong knowledge across IAM, AppSec, network security and DevSecOps
  • Experience with CI/CD security, SAST, DAST, SCA and security automation
  • Understanding of Terraform/IaC, Docker and Kubernetes
  • Experience with modern identity platforms such as Microsoft Entra ID and/or Okta

Strong understanding of risk-based security control design

  • Knowledge of APRA CPS 234, CPS 230, ISO 27001, NIST CSF, Essential Eight and the Privacy Act 1988
  • Strong stakeholder management and the ability to influence technical and senior business stakeholders

Preferred

Experience working in highly regulated enterprise environments

  • CISSP, CISM, CCSP, AWS Security Specialty or Google Professional Cloud Security Engineer certifications will be highly regarded but are not mandatory.
  • If you’re a senior Security Engineer, Security Architect or Cyber Security Advisor looking for a long-term Melbourne contract where you can combine hands-on security expertise with strategic advisory and risk, we’d like to hear from you.

Contract Details

  • 12-month contract, with potential extension
  • Melbourne
  • Hybrid
  • Senior / Principal-level engagement

Apply

[Apply at The Missing Link](https://apply.workable.com/the-missing-link/j/762FEBD521/apply)