Team Overview:

The AppSec Team focuses on building secure mobile, web and cloud applications throughout their development lifecycle, from start to finish. AppSec is a proactive approach to security that help prevents threats at the initial stages rather than a reactive approach.

As an Application Security Engineer at TAL, you will be responsible for ensuring the security of our applications by implementing and maintaining robust security measures at TAL. You will work closely with development teams to identify and mitigate security vulnerabilities throughout the software development lifecycle. You will also foster security awareness and DevSecOps culture, providing security training to development teams.

Key Responsibilities:

• Ascertain a holistic understanding of TAL’s systems, development workloads and lifecycles.
• Create and update software application security policies and procedures.
• Work closely with the TAL Cyber team to implement security best practices and standards to protect sensitive data and ensure compliance with regulations.
• Collaborate with development teams to integrate security controls into the software development process.
• Conduct security assessments on applications to identify and remediate vulnerabilities.
• Drive response to security incidents, conducting root cause analysis and implementing corrective actions.
• Analyse application code and recommend solutions to identified security issues.
• Execute planned and ad-hoc security scans of software applications, and interpret results for development teams.
• Maintain documentation related to application security processes and controls.
• Providing application security guidance, coaching, and training to development teams and other stakeholders.
• Ensuring the adoption and implementation of application security tools in the DevSecOps lifecycle.
• Gather, manipulate and report on data from application security tools programmatically.
• Work with vendors to tailor application security tools to fit TAL workloads. 
• Stay up-to-date on the latest security threats and trends to proactively address potential risks and educate development teams.

What you’ll do

• Develop and maintain in depth understanding of the Commercial segment’s processes, systems, technologies, data, customers, consumers, partners.

• Act as the primary local security contact / advisor for key stakeholders within the Commercial segment.

• Advise Security Leadership in decision making for and affecting the Commercial segment.

• Analyse and manage security compliance requirements based on industry standards, national and international regulatory framework and internal policy framework.

• Proactively identify non-conformities and areas of potential improvement and facilitate development of pragmatic solutions to address issues, utilizing the security assessments and observations processes.

• Engage with clients and customers as needed to assist the business to achieve its objectives with pre and post sales activities (e.g. explain our security program, support external audits, support bids/RFP process, assist in customer communication of security incident, etc).

• Participate in BU related conferences, client facing engagement, industry forums to represent the Security program.

• Provide regular and timely reporting on the status of information security across the Commercial segment.

What experience you need 

• 5+ years experience within the security industry.

• Bachelor’s degree or an equivalent combination of education and experience required.

• Strong communication and presentation skills demonstrated by your experience in presenting and communicating at all levels within the organization and senior management. An ability to translate complex technical security concepts into business-friendly communications, especially covering cloud usage.

• Ability to independently influence others in order to achieve objectives.

• Ability to work collaboratively within a team as well as independently and autonomously, and engage stakeholders as required, to own and carry on end-to-end projects and initiatives.

• Strong ability to build and maintain trusting relationships with internal and external customers and

• always demonstrate good judgment, integrity and actively collaborates and commits to the success of others.

• Knowledge and experience of Information Security Risk and Security governance.

• A solid understanding of security best practices and international standards such as ISO2700 and PCI DSS and NIST.

• Demonstrable experience of driving operational implementation of policies and processes.  

  What could set you apart

• Previous experience as a Business Information Security Officer (BISO).

• Experience working in a matrix environment with globally diverse team members.

• Experience with Google Cloud (GCP).

• Previous experience working with external clients.

• Experience participating in IT Security audits, working with auditors..

• Experience obtaining or maintaining compliance certifications such as SOC2, PCI, ISO 27001.

• Understanding of cyber risks in the banking/ financial services sector.

• CISM, CISSP or related certification is a strong plus.

Primary Location:

Function:

Schedule:

Our Company

Changing the world through digital experiences is what Adobe’s all about. We give everyone—from emerging artists to global brands—everything they need to design and deliver exceptional digital experiences! We’re passionate about empowering people to create beautiful and powerful images, videos, and apps, and transform how companies interact with customers across every screen. 

We’re on a mission to hire the very best and are committed to creating exceptional employee experiences where everyone is respected and has access to equal opportunity. We realize that new ideas can come from everywhere in the organization, and we know the next big idea could be yours!

Creativity for All

Adobe is a place where exceptional people work – don’t just take our word for it, our employees have recently voted us #1 on the Great Place to Work list for the 10th consecutive year!

We’re proud to offer market leading employee benefits designed to suit your lifestyle. Some of the great benefits include health insurance, global days off, wellness fund, market-leading parental leave, access to our Employee Stock Purchase Program and programs designed to help continue to build your career.

We also proudly empower our employees to get involved with corporate social responsibility and offer a broad range of opportunities to make a bigger impact through philanthropy, employee, and community engagement.

We know that people are the differentiator in our business, and that's why we want to meet you.

A bit more about you

In the role of Security Compliance Specialist, Tech GRC you will be part of a critical hub for Sales, Legal, Engineering, Compliance, Operation, and Marketing teams in presenting Adobe's security posture and overcoming customer security objections and concerns.

Are you interested in leading Security Compliance efforts, seeing how the business works up close, and chipping in to ensure sales go through optimally for a product-based organization? Do you have experience in driving Information Security assessments internally or externally and talking with customers? Then this role is for you.

In this role you’ll be focusing on driving Australian Security Compliances as part of the APAC Security Compliance Program by collaborating with external assessors, government agencies, product development & operations teams, core security teams, and others. This job also blends an understanding of information security with evangelism, program management, business savvy, and an eye for detail with timely execution.

What you’ll do

• Perform the IRAP Readiness Assessment covering various cybersecurity guidelines of the Information Security Manual (ISM) for products looking for IRAP assessment.
• Present Readiness Assessment result reports to summarize the compliance objectives, key findings, and next steps to Partners and Management regularly.
• Coordinate with relevant partners to remediate key findings and prepare the products for external IRAP assessment.
• Oversight development of System Security Plan (SSP) documents for in-scope products.
• Continuously evaluate and drive upgrades of operational policies, procedures, and standard processes to meet ISM requirements.
• Review and coordinate Cloud Controls Matrix (CCM) updates and IRAP Cloud Security Assessment Report (IRAP Report) with assessors.

What you need to succeed

• Bachelor/Master degree or equivalent experience in Information Security/Cyber Security or related field.
• Minimum 5-8 years of related security compliance assessments, IT/Cloud auditing, and control testing experience.
• Must know Security Compliance frameworks (e.g. IRAP, Cyber Essential Eights, ISO, SOC 2, etc.)
• Sound knowledge of Cloud IT processes and Cloud IT infrastructure like AWS, Azure, GCP, etc.
• Hold certifications like CISA, IRAP Assessor, and others.
• Good interpersonal and highly developed communication skills

At Adobe, you will be immersed in an exceptional work environment that is recognized throughout the world on Best Companies lists. You will also be surrounded by colleagues who are committed to helping each other grow through our unique Check-In approach where ongoing feedback flows freely.

If you’re looking to make an impact, Adobe's the place for you. Discover what our employees are saying about their career experiences on the Adobe Life blog and explore the meaningful benefits we offer.

Adobe is an equal opportunity employer. We welcome and encourage diversity in the workplace regardless of gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, or veteran status.

Adobe is proud to be an Equal Employment Opportunity and affirmative action employer. We do not discriminate based on gender, race or color, ethnicity or national origin, age, disability, religion, sexual orientation, gender identity or expression, veteran status, or any other applicable characteristics protected by law. Learn more.
 

Adobe aims to make Adobe.com accessible to any and all users. If you have a disability or special need that requires accommodation to navigate our website or complete the application process, email accommodations@adobe.com or call (408) 536-3015.

Adobe values a free and open marketplace for all employees and has policies in place to ensure that we do not enter into illegal agreements with other companies to not recruit or hire each other’s employees.

The Cyber Security team provides governance, audit, control, and operational Cyber Security capabilities to support business and operational objectives of Nine group. Minimising friction and managing appropriate risk are key tenets of the team.  The Security team works closely with the Security Cloud Practice, Product Engineering, Network and Infrastructure and Services teams to collaboratively manage cyber controls.

The Cybersecurity Education and Change Lead plays a critical role in ensuring Nine’’s cybersecurity posture is robust by leading the development and implementation of comprehensive training programs and facilitating a culture of security awareness and compliance. This role combines expertise in cybersecurity with effective change management strategies to enhance Nine’'s ability to protect sensitive information and mitigate cyber threats.

Key accountabilities of this role is to: 

• Develop and maintain cyber security training curriculum that aligns with best practices, regulatory requirements and Nine’s business needs

• Create training materials, including e-learning modules, manuals, and workshops to educate employees on cybersecurity concepts, policies and procedures

• Collaborate with subject matter experts to ensure training content remains current and relevant

• Plan and conduct cybersecurity training sessions, workshops, and awareness programs for employees at various levels

• Manage red and purple team penetration test exercises and supplier management

• Utilise a variety of training methods, such as in-person sessions, webinars, and online courses, to engage and educate employees

• Evaluate the effectiveness of training programs through assessments, feedback, and performance metrics

• Develop and implement a cybersecurity change management strategy to promote a culture of security awareness and compliance.

• Work closely with key stakeholders to identify and address barriers to cybersecurity adoption and adherence to policies

Konica Minolta is innovative, robust and continually evolving. From printing, scanning and copying to solution services, cloud storage and robotics, our award-winning products and solutions help companies to transform and move information faster. Our people make this possible. As a Workplace Gender Equality Agency Employee of Choice, we offer workplace flexibility, support diversity and promote events and activities to support wellbeing. We strive to create and maintain an inclusive workforce as diverse and capable as our class-leading solutions. We actively encourage women and those from diverse backgrounds to apply for our roles.

About the role
The Security and Compliance Manager will have a “hands-on” role, governing the operations of the Security Operations Team, performing daily tasks and maintenance to security related systems, as necessary.  You will be responsible for coordinating and prioritizing activities for the Security Operations Team. This position will include membership in the Konica Minolta Global Security Council and would represent the APAC region.

• Establish and maintain the Security Operations governance framework, ensuring alignment with Company Objectives
• Lead team resources and provide oversight in the onboarding of technical solutions for managed clients.
• Establish internal project scope and design workflow solutions for our clients while ensuring client satisfaction throughout the entire process.
• Understand and improve IT Weapons Design and Build standards
• Participate in IT Weapons training and recommended certification paths
• Be an escalation point for the Service Desk and other Consulting teams at IT Weapons
• Perform system audits
• Analyze security data and reports
• Maintain managed security solutions (SIEM, AV, Firewalls, Anti-SPAM, Vulnerability Management tools)
• Perform security assessments
• Be available to assist team members 24/7 - on call based on rotating team schedule
• Be able to handle multiple assignments, manage priorities, and meet strict deadlines
• Have proven client-facing skills developed in a professional environment
• Have experience interacting with project stakeholders and vendors

Who are we looking for?

• D3+ years in networking and security related functions
• Experience with maintain security solutions.
• Experience with event analysis

As per Konica Minolta compliance procedures, the successful candidate will be required to undertake background checks.

What can KM offer you?
You will enjoy a collaborative team culture where you will be supported and empowered to contribute your ideas and identify opportunities to develop your team and yourself. We are dedicated to the values of diversity and inclusion and have a firm commitment to ethical practices and corporate responsibility.

Konica Minolta is committed to providing a working environment that is inclusive and fair to both women and men. Progressive policies such as our domestic violence policy; paid parental leave and flexible workplace policies enable our people to balance work and life responsibilities. We have been thrilled to receive a citation from the Workplace Gender Equality Agency (WGEA) as an Employer of Choice for Gender Equality 5 years in a row.

Equal Opportunities
We are committed to providing equal opportunities and actively encourage applications from all backgrounds to apply for our roles, regardless of gender, age, sexual orientation, ethnicity, religion or disability.
If you are require any adjustments/assistance during the recruitment process please reach out to [email protected]

Join our Team and thrive in an environment built on strong Collaboration, continuous Learning and personal Growth. Every day at Konica Minolta is an opportunity to share your Ideas, influence Change and engage with colleagues from diverse backgrounds and experiences.

About Us

The Missing Link have been operating in Australia for over 26 years with offices in both Sydney and Melbourne. With over 180+ staff, you will be joining a highly successful team which is set to grow.

Our core offerings include cyber security, hardware and software, resiliency, cloud, communications, infrastructure, consulting services and managed services.

Our Security division is one of the fastest growing Cyber Security businesses in Australia and is split into three service areas:

• Red Team (Security Consulting & Penetration Testing)

• Blue Team (Security Architecture & Engineering)

• Security Operations Centre (SOC)

We're recognised as industry leaders and accredited to the highest levels in the design, delivery, and support of the latest technologies. We partner with market-leading global and local vendors to deliver world-class business outcomes through IT transformation. Today, The Missing Link is one of the most awarded IT companies in Australia.

We have a number of focus areas and specialisation within the SOC, these are:

• Defender: SOC Engineers who are responsible for the proactive management, maintenance and incidents involving security solution software and infrastructure

• Hunter: SOC Analysts who conduct regular hunts through telemetry from various security solutions looking for IOCs and BIOCs

• Watcher: SOC Analysts who triage and investigate alerts from various security solutions but primarily from EDR and SIEM

• Responder: SOC Analysts who lead or contribute to the progression and resolution of Incident Response scenarios
  

The Role

The Missing Link Security Operations Centre provides 24x7 Managed Detection & Response (MDR) support to our clients across a variety of sectors. Day-to-day you will be responsible for the monitoring and triaging of alerts from market-leading MDR technologies, collaborating with our SOC Engineers, Red Team and our clients to develop, test and tune use cases through Purple Teaming exercises.

You will also be proactively supporting our clients and the Senior Security Analysts in responding to security incidents, through log and malware analysis, OSINT and researching the latest zero-day vulnerabilities.

We believe in investing in and developing our people through a variety of training and education programs. When you first come on board, you’ll be given a structured training and development plan that is tailored to you and your previous experiences. This will include a combination of industry qualifications as well as vendor-specific certifications specific to your role.

Essential:

• 1+ years of experience working with systems, networking and security technologies either in an Managed Service Provider, or equivalent role.

• Hands-on security knowledge of Windows/Linux/Unix platforms

• Hands-on experience with one or more SIEM/EDR/VM systems and can demonstrate end to end knowledge of the TDIR Methodology

• In-depth knowledge of the MITRE ATT&CK Framework

• A demonstrated knowledge of IT security controls, OSI Model and TCP IP Stack

Desirable:

• You are naturally curious and a self-starter. Tell us about how you build Cyber Labs and Ranges in your own time, or your latest research project.

• You listen to and follow podcasts and bloggers like Darknet Diaries, Recorded Future, @IT_SecGuru or @TheHackerNews. Tell us what r/ threads you’re currently tracking.

• You have exposure to Vulnerability Assessments or Penetration Testing professionally or through your own personal research. If you’ve started a CEH or OSCP certification, even better!

• Show us how you automate using PowerShell and Python. • You have COMPLETED, not started, certifications such as CompTIA Network+ and Security+ as well as core networking such as Cisco CCNA or CCNP.

A great company culture is very important to The Missing Link. Keeping everyone happy is one of our top priorities.

Here are some of the best bits about working at The Missing Link and some of the ways we try and maintain our staff happiness levels:

• Supportive, collaborative and respectful environment
• Training / mentoring programs
• Regular fun social events
• Diverse range of employee benefits including paid volunteer days
• Great bonus structure
• Free breakfast, drinks and monthly lunches

About Us

The Missing Link has been operating in Australia for over 26 years, helping businesses achieve their goals through IT transformation with our core offerings; IT & Cloud, Cyber Security and Automation.

Today, The Missing Link is one of the most awarded IT companies in Australia – recognised mainly for our people and processes. With over 180+ staff and 25+ different countries represented in our business, we’ve cultivated a respectful and positive workplace where everyone feels valued, respected and empowered. We pride ourselves on our training and development that ensures our staff can grow their careers alongside our growing business.

Our people are our difference, and we are always looking for amazing talent to join our team. If you’re looking for a highly successful, inclusive and fast-growing workplace, we’d like to talk to you.

The Role

The Missing Link is looking for an experienced and talented Security Engineer to join The Missing Link Security Engineering Team. The Security Engineer will have vast knowledge within the IT Security industry which includes at least five years hands-on experience as well as knowledge of a range of security products, technologies, and solution offerings.

Ideally you will have in depth CyberArk experience, have a strong security background and passionate to join our security practice taking part and leading security engineering projects.

This is an excellent opportunity to job a fast growing company within the cyber security space and to receive ongoing training, coaching and support to help you develop your career.

Responsibilities

The following (but not limited to) Security Engineer duties are expected to be carried out by the successful candidate:

• Develop and document Detailed Level Design for various security products, pre-dominantly around PAM projects
• Run design workshops
• Implement security products for our clients
• Regularly perform security checks and troubleshooting
• Identify problems in a timely manner
• Implement new processes with the goal to optimize company's security system
• Stay up to date with latest security technology and trends
• Perform regular audits and provide reports
• On-going certification training and renewal as required by the business

The ideal candidate will have extensive CyberArk as well as security networking experience:

• 5+ years experience working with CyberArk PAS (On-prem or Privileged Cloud)
• 5+ years experience with CyberArk Application Access Manager
• Knowledge of PAM administration (Defining Access Control, Policies/Platforms, User provisioning and entitlements, Managing Applications Credentials, and User Access Policy Management, Application Access Manager components).
• CyberArk CDE
• CyberArk CPC
• Problem-solving, critical thinking and time management abilities
• Outstanding written and communication skills including experience with an executive audience
• Defence force experience is desirable

A great company culture is very important to The Missing Link. Keeping everyone happy is one of our top priorities.

Here are some of the best bits about working at The Missing Link and some of the ways we try and maintain our staff happiness levels:

• Supportive, collaborative and respectful environment
• Training / mentoring programs
• Regular fun social events
• Diverse range of employee benefits including paid volunteer days
• Great bonus structure
• Free breakfast, drinks and monthly lunches

·     ASX 300 listed financial services organisation

·     Flexible & hybrid working arrangements

·     Sydney or Melbourne location

Do you want to:

·       work in an organisation where 98% of all team members believe that their manager genuinely cares about their well- being and feels valued?

·       understand the strategic direction of your organisation and how your effort contributes to success?

·       work in an inclusive environment who is proudly a WGEA Employer of Choice for Gender Equality?

·       work for a climate Active CERTIFIED Carbon Neutral fleet management organisation?

·       be recognised and rewarded for your performance?

·       work for an organisation where ‘C-A-R-E’ are their values?

·       have career opportunities, a voice that’s heard, and a fast-paced, dynamic yet flexible working environment?

If so, then FleetPartners might be the place for you.

FleetPartners Group is an ASX 300 listed financial services, vehicle management, and employee benefits company. We support all types and sizes of businesses to acquire and effectively manage their vehicles, with over 93,000 vehicles currently under management.  We also help everyday Australians to maximise their salary by administering employee benefit programs and help them to get into the car of their dreams.

Who we’re looking for:

The Security Manager is responsible for overseeing and coordinating security operations within FleetPartners. Your primary goal is to create a secure and resilient operational and technical environment through the development and implementation of security strategies, policies, and procedures to safeguard our customers, assets, employees, and visitors against potential threats.

You will possess a strong understanding of a wide range of security products and services, including but not limited to Endpoint Protection, Threat Intelligence, Vulnerability Management, SIEM and SOAR. You will work with key stakeholders in the business from areas such as Operations, Sales & Marketing to ensure all key aspects of Security Operations have been considered. Your insights and expertise will be instrumental in shaping our security strategy.

You will manage the security team and will report into the Head of Cloud & Infrastructure.

What you’ll be doing:

• Work with CIO and Head of Cloud & Infrastructure on developing, maintaining and executing the cyber security strategy
• Collaborate with technology team on security within design, development and deployment of new systems, applications, networks & technology
• Continuously work with departments in the organization to reduce risk. From technical controls and procedures to policies
• Monitor, coordinate and conduct investigations into security incidents
• Work closely with MSSP/Vendor partners
• Managing all internal and external security compliance engagement activities
• Convey cyber security concepts to technical and non-technical colleagues
• Conducting Pen-test, vulnerability tests and identifying and addressing any weaknesses
• Monitoring information systems and responding to any cyber-security incidents
• Ensure security patches are up to date for all environments including end-user devices.
• Automating security controls, data and processes
• Developing policy around third-party risk with vendors and suppliers
• Working with NFR to identify and manage data privacy risks as well as internal and external compliance
• Maintaining up-to-date knowledge on cyber-security technologies and standards
• Facilitate training employees to understand and follow security standards.
• Retaining and building on our ISO27001 certification
• Maintaining and building on Essential 8 rating

• Experience leading and managing a cyber security team
• Relevant industry, technology, and process knowledge expertise
• Adept at building internal and external relationships
• Excellent knowledge of security protocols and procedures
• Experience in reporting and emergency response planning
• In-depth knowledge of incident management processes, including identification, containment, eradication, recovery, and lessons learned
• Works well independently and strong coordination and leadership skills
• Excellent communication and interpersonal skills
• Relevant tertiary qualifications and security certifications will highly regarded

• 7 additional days of annual leave per year.
• 16 weeks paid parental leave for primary careers, regardless of gender and with no minimum tenure and 4 weeks paid leave for secondary carers.
• a ‘Dress for your Day’ policy.
• flexible and hybrid working arrangements.
• Rewards programme, including a range of discounts from a variety of retailers
• an extensive range of other employee benefits.

You will be guiding the technical development of our game security measures, protecting the game client from hacks and exploits, hardening the code and data running on the player’s PC, and developing a secure infrastructure and server ecosystem for our players. You will be the technical leader, driving a team holding the player’s connected experience as the core of its mission, ensuring that players compete on a level playing field.

WHAT YOU'LL DO

• Secure the game client and its interactions with the game servers
• Collaborate with the networking team to harden and optimize network traffic
• Investigate exploits and cheats happening in our game and others
• Guide engineers to develop world class security systems and practices
• Educate content creators and gameplay engineers on how to maximize game security
• Coordinate with the production team, curating the security roadmap and direction
• Maintain and extend documentation on security best practices

Keeping out the cheaters and making the game environment fair for everyone is an important and a rewarding struggle. We want to give people the chance to show off their skills without having to contend with players running aimbots.

We are looking for a Gameplay Security Engineer to work with us on XDefiant, a new multiplatform online multiplayer action game. The game is a free-to-play, fast-paced arena shooter that combines intense combat with personalized loadouts and specialized factions, as teams battle for domination.

You’ll be working to make the game client and servers are as secure as possible, so we can ensure that our users get the best, fairest game experience possible. Working to make sure the game server data is secure and validated, blocking game exploits, and helping create the best possible play environment. You will work with a small, collaboration-oriented team where you will have the opportunity to contribute in meaningful ways. 

­­WHAT YOU'LL DO

• Analyze the game ecosystem for exploits
• Ensure that server logic and server-client interactions are secure and validated
• Work together with the networking team to harden and optimize network traffic
• Maintain and extend documentation on gameplay security best practices
• Self-manage programming task schedule updates and collaborate with production team
• Ensure that your code meets the team's coding standards to deliver high quality and maintainable code 

Join the team redefining how the world experiences design.

Hey, g'day, mabuhay, kia ora,你好, hallo, vítejte!

Thanks for stopping by. We know job hunting can be a little time consuming and you're probably keen to find out what's on offer, so we'll get straight to the point. 

Where and how you can work

Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane, Perth and Adelaide. But you have choice in where and how you work. That means if you want to do your thing in the office (if you're near one), at home or a bit of both, it's up to you. 

What you’d be doing in this role

As Canva scales change continues to be part of our DNA. But we like to think that's all part of the fun. So this will give you the flavor of the type of things you'll be working on when you start, but this will likely evolve.

About Senior Security Engineers 

At Canva, we’re all constantly striving towards our Crazy Big Goals! As the features and services of our product suite evolve, we’re setting some large and ambitious goals. We need to be able to ship robust and secure features without sacrificing speed and scale of delivery, which is where our Application Security team comes in. 

As a Senior Security Engineer within our Application Security team, your primary objective is to safeguard Canva's products and features by proactively identifying and eliminating vulnerabilities. You play a crucial role in ensuring the security of our Community by providing guidance and support to engineering teams in identifying and resolving security issues as they arise.

About the Security Group

The Security Group is responsible for protecting Canva systems and data from information security threats. Our teams work together, and with other groups, to deliver preventive and detective controls and processes that reduce security risk.

The group runs programs across Identity and Access Management, Application Security, Risk Management, and Threat Detection and Response domains.  

What you'll be doing: 

• Identifying, introducing, and improving security controls in Canva’s compute, platform engineering, and cloud infrastructure disciplines.
• Advising infrastructure engineers on cloud platform security best practices and design patterns.
• Leading threat modeling exercises for new and complex architectures and features.
• Designing and developing tools, libraries and services that support Canva engineers in building secure software.
• Evaluating new and emerging security technologies that make it easier to reliably maintain platform and infrastructure security.
• Discovery and triage of vulnerabilities across Canva’s threat landscape.
• Assisting your team in interviewing and hiring other talented security engineers.
• Mentoring and supporting the growth of your colleagues in your areas of expertise.

Required Experience:

• Experience with Infrastructure-centric Secure Design Review and Assessment, including Risk Assessment and Threat Modeling process.
• Previous experience working with engineering teams to audit and remediate issues within the DevOps ecosystem (e.g. Continuous Delivery, Continuous Integration, Infrastructure as Code).
• Subject-matter expertise of Amazon Web Services and Secure public cloud architectures, including services within the AWS ecosystem.
• Previous hands-on experience with infrastructure tooling and orchestration platforms, including Terraform, Docker, K8s, EKS/ECS and similar.
• Hands-On Experience with CI/CD platforms, such as Buildkite, Jenkins, Flux, ArgoCD, or similar.
• Proficient with one or more modern program languages (Golang, Python or Java preferred).
• Experience leading projects end-to-end whilst balancing requirements from multiple partners, and mentoring Security Engineers.
• Excellent written and verbal communication skills; with the ability to work with a range of Canvanauts from different backgrounds, with different expertise, and with different professional and personal needs.

Beneficial Experience (not required, but helpful):

• Experience building and deploying tooling in support of Containerized Workloads.
• Hands-On Experience  Auditing K8s/EKS configurations, including Network Policies, Manifests, Container Images, Image Registries, Dockerfiles, etc.
• Proven understanding of Secrets Management platforms as well as Secrets Management Patterns in Orchestrated Environments.
• Experience with ISO27001 Preparedness and Auditing.

What's in it for you?

Achieving our crazy big goals motivates us to work hard - and we do - but you'll experience lots of moments of magic, connectivity and fun woven throughout life at Canva, too. We also offer a stack of benefits to set you up for every success in and outside of work.

Here's a taste of what's on offer:

• Equity packages - we want our success to be yours too
• Inclusive parental leave policy that supports all parents & carers
• An annual Vibe & Thrive allowance to support your wellbeing, social connection, office setup & more
• Flexible leave options that empower you to be a force for good, take time to recharge and supports you personally

Check out lifeatcanva.com for more info.

Other stuff to know

We make hiring decisions based on your experience, skills and passion, as well as how you can enhance Canva and our culture. When you apply, please tell us the pronouns you use and any reasonable adjustments you may need during the interview process.

Please note that interviews are conducted virtually.