Cloud Security and DevSecOps Engineer

IPH Limited is the holding company for intellectual property ("IP") and associated companies offering a wide range of IP services and products. IPH companies employ a highly skilled multidisciplinary team of approximately 1600 people in Australia, New Zealand, Canada, Singapore, Malaysia, China, Indonesia, Thailand, Philippines and Hong Kong. IPH companies service a diverse client base of Fortune Global 500 companies, multinationals, public sector research organisations, SMEs and professional services firms worldwide.

The IPH Group is committed to promoting and maintaining a workplace culture of shared respect to enable us all to feel valued and be the best we can be. We encourage applications from Aboriginal and Torres Strait Islander people and individuals from diverse backgrounds. We remain committed to providing reasonable and fair adjustments to provide a positive, barrier free, transparent recruitment process and supportive workplace.

About the Role

IPH Limited is seeking a Cloud Security and DevSecOps Engineer to join our Sydney team on a full-time basis. You will be responsible for designing, implementing and maintaining security controls across the organisation's cloud environments and software development lifecycle.

The role will focus primarily on securing Azure and AWS platforms, while embedding application security practices through the effective management and operation of SAST, DAST and Software Composition Analysis (SCA) tools and associated governance processes.

Working closely with infrastructure, cloud, architecture, development and security teams, you will ensure security is integrated into cloud services and applications by design, enabling secure and resilient business outcomes.

• Design, implement and maintain cloud security controls across Azure and AWS environments.
• Monitor cloud security posture and recommend remediation activities to address security risks and compliance gaps.
• Develop and maintain cloud security standards, baselines and architecture patterns.
• Conduct cloud security reviews and risk assessments for new projects and services.
• Implement security monitoring, logging and alerting capabilities.
• Establish and mature application security practices across the SDLC.
• Manage and optimise SCA, SAST and DAST tools and embed security testing into CI/CD pipelines.
• Review and triage application security vulnerabilities and support development teams with remediation activities.
• Support threat modelling and security reviews and provide security advice throughout solution design, development, testing and deployment.
• Promote DevSecOps culture and Secure by Design principles across technology teams.
• Provide security input into architecture reviews, technology initiatives, audits and security policies.

• 5+ years' experience in Cyber Security, Cloud Security, Application Security or related disciplines.
• Hands-on experience securing Microsoft Azure and AWS environments.
• Strong understanding of cloud security architecture and best practices.
• Experience operating SAST, DAST and SCA tools and integrating security testing within CI/CD pipelines.
• Understanding of OWASP Top 10, OWASP ASVS and secure coding principles.
• Experience with vulnerability management and remediation processes.
• Knowledge of IAM, Zero Trust and Privileged Access Management concepts.
• Experience with scripting or automation using PowerShell, Python, Bash or similar.
• Strong stakeholder engagement and communication skills.
• Relevant certifications such as Azure Security Engineer Associate, AWS Certified Security Specialty, CISSP or Certified DevSecOps Professional are preferred.

We're proud to offer a range of benefits that support your wellbeing, growth, and work-life balance, including:

• Paid parental leave of up to 18 weeks, and up to 6 weeks paid Secondary Caregiver leave
• Leave purchase scheme (up to 2 weeks)
• 1 day paid IP Day
• Group Salary Continuance Insurance
• Access to our Wellbeing Hub
• Hybrid working as standard
• Structured professional development programmes
• Fresh fruit delivered daily and monthly morning tea
• A collaborative, inclusive and supportive culture

If this role sounds like a great fit, apply now with your updated resume and cover letter introducing yourself and why this role is right for you.

Successful candidates will undergo a standard pre-employment screening as part of the hiring process within the IPH Group. This process may include verifying key information such as your identity, qualifications, references, and criminal history. By submitting your application, you acknowledge that you may be required to complete any necessary background checks relevant to the role. Please note, only shortlisted applicants will be contacted directly.