Security Engineer (Fractional)
New
J
JobgetherCybersecurity, SaaS
Based in AustraliaPart-Time
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Required Skills
- AWS
Requirements
- Bring hands-on experience in security engineering, cloud security, application security, DevSecOps, or a closely related discipline.
- Have experience in software, technology, SaaS, or outsourcing environments.
- Understand the software development lifecycle, CI/CD security, identity and access management, vulnerability management, and endpoint security.
- Have knowledge of cloud platforms such as AWS and GCP.
- Be able to assess and validate cloud configurations, GitHub repositories, CI/CD pipelines, and security tooling.
- Translate technical findings into practical, prioritized recommendations.
- Have experience with client security assessments, questionnaires, audits, vendor assessments, or similar external reviews.
- Bring knowledge of governance, risk management, SOC 2, ISO 27001, GDPR, or related compliance frameworks.
- Work independently in a fractional capacity and prioritize high-impact initiatives.
- Communicate effectively with technical teams, leadership, and business stakeholders, and provide mentorship.
- Relevant AWS or GCP certifications, CISSP, CISM, CISA, or equivalent credentials are preferred.
- Experience with geographically distributed teams across Europe, Asia, and Australia, or supporting early-stage startups, is an advantage.
Responsibilities
- Develop and maintain a 12-month security roadmap aligned with business risk and organizational needs.
- Maintain a security risk register and prioritize remediation based on business impact.
- Mentor the IT Manager and help turn technical activities into measurable security controls.
- Guide engineering teams on secure coding, OWASP principles, DevSecOps, and security practices.
- Assess and strengthen controls across cloud infrastructure, development environments, repositories, CI/CD pipelines, identity and access management, and endpoints.
- Align data-handling practices with applicable privacy and security regulations, including GDPR, the Philippines Data Privacy Act, and the Australian Privacy Act.
- Improve responses to client security questionnaires, audits, and vendor assessments.
- Develop practical policies for incident response, access control, business continuity, and disaster recovery.
- Guide selection and implementation of security technologies, including EDR, SIEM, and vulnerability management tools.
- Advise early-stage ventures and assess security, privacy, and data protection risks in potential investments.
View Full Description & ApplyYou'll be redirected to the employer's site
