humm group Logo

humm group

Security Engineer

Posted 2 Days Ago
Be an Early Applicant
In-Office
Sydney, New South Wales, AUS
Mid level
In-Office
Sydney, New South Wales, AUS
Mid level
The Security Engineer will embed security across the software development lifecycle by leading threat modeling, secure design and code reviews, automated security testing, penetration testing, vulnerability remediation, and security standards. The role manages application security tools and CI/CD quality gates, supports PCI DSS and ISO 27001 compliance, develops secure coding guidance and training, and partners with engineering, architecture, risk, and delivery teams to improve security maturity.
The summary above was generated by AI

We Dream. We Design. We Deliver.


Join hummgroup, one of Australasia’s most successful and enduring non-bank financial services institutions. We specialise in fast, easy finance with a market-leading range of business asset finance, credit cards and point of sale payment plan solutions designed around the core needs of today’s businesses and retail consumers. Come join our team and be a part of our next chapter of innovation and growth.

About the role

The Security Engineer plays a critical role within the organisation’s Cyber Security and Humm 3.0 Transformation program, protecting information and technology assets in an increasingly complex threat landscape. This role offers the opportunity to work hands-on with modern security technologies, tools, and frameworks, contributing directly to the organisation’s cyber resilience and risk posture. You will collaborate with cross-functional teams, analyse threats, respond to incidents, and support continuous improvement of security controls.


Ideal for technically capable cyber security professionals, this role suits someone who thrives in fast-paced environments, enjoys solving complex security challenges, and wants their work to have real, visible impact.


Key Responsibilities

Key responsibilities include:

  • Monitor and assess security threats, vulnerabilities and events across SIEM, endpoint, network, email, web, DLP and cloud security platforms.
  • Investigate cyber security incidents, conduct threat hunting and root cause analysis, and turn lessons learned into stronger detection and response.
  • Implement, configure and optimise security tools and controls across identity, endpoint, network, application and cloud environments.
  • Manage vulnerability scanning, system hardening, attack surface reduction and remediation validation.
  • Support cyber risk assessments, audits and compliance activities across on-premises, cloud, SaaS and third-party environments.
  • Coordinate security testing, DevSecOps, penetration testing and assurance activities with internal teams and external partners.
  • Produce security dashboards and reports, build trusted stakeholder relationships, promote security awareness and participate in the on-call rotation as required.

Qualifications & Experience

  • 3+ years of experience in a cyber security role such as Security Analyst, Security Engineer, or similar.
  • Relevant certifications and/or tertiary education, such as:
    • Security Operations, CompTIA CySA+, AWS / Microsoft security certifications or similar
    • Vendor‑specific certifications for SIEM, EDR, firewalls, cloud security, or DLP.
  • Experience with SIEM platforms, automation, threat hunting, and intelligence.
  • Firewalls, proxies, secure web gateways, endpoint detection and response, application whitelisting, routers, switches, micro‑segmentation, NDR, DLP, SSE and web application firewalls.
  • Microsoft 365, AWS, Azure, Windows Server, Linux/Unix, iOS and Android.
  • Web application security, vulnerability scanning, DevSecOps pipelines, penetration testing support.
  • Experience with risk assessments, SOPs, playbooks, guidelines, compliance frameworks (PCI DSS, ASD Essential 8, ISO 27001, NIST).
  • Ability to produce clear operational‑level reporting.

About you

  • Strong analytical and problem‑solving mindset.
  • Ability to work independently in fast‑paced environments.
  • Effective communicator who can simplify technical concepts for non‑technical stakeholders.
  • Collaborative team player committed to improving organisational security maturity.
  • High levels of integrity, accountability, and attention to detail.

Working at hummgroup

We embrace flexible working arrangements, ensuring a genuine work-life balance and a fun, vibrant inclusive culture that embraces diverse perspectives and values the unique contributions of each of our team through our behaviours Curious - Adaptable - Tenacious – Accountable - Respectful. 


We invite candidates of all gender expressions, ethnicities, ages, and other culturally diverse groups to apply.  We are committed to making reasonable adjustments to provide a positive, barrier-free recruitment process and welcoming and supportive environment where all our people can thrive.


If this sounds like the opportunity, you have been looking for then apply today!


HQ

humm group Sydney, New South Wales, AUS Office

121 Harrington St, Sydney, New South Wales, Australia, 2000

Similar Jobs

3 Days Ago
In-Office
Sydney, New South Wales, AUS
Senior level
Senior level
Artificial Intelligence • Fintech • Payments • Business Intelligence • Financial Services • Generative AI
Lead development of AI-powered information security tools, internal infrastructure, threat-hunting and remediation systems. Build and maintain Kubernetes clusters, serverless workloads, ETL pipelines, and large-scale log-processing infrastructure. Partner with engineering teams to automate security outcomes, support incident response, and reduce risk. Mentor software engineers and independently own technical roadmaps and project delivery.
Top Skills: CC++Cloud InfrastructureEtl PipelinesGoKubernetesLinuxPythonServerless Computing
3 Days Ago
Hybrid
Sydney, New South Wales, AUS
Senior level
Senior level
Artificial Intelligence • Fintech • Payments • Business Intelligence • Financial Services • Generative AI
Lead development of AI-powered information security tools, infrastructure, and applications. Build and maintain Kubernetes clusters, serverless workloads, ETL systems, and large-scale log pipelines. Develop threat hunting, remediation, security scanning, and patching automation tools while partnering with engineering teams to reduce risk. Mentor software engineers and independently deliver high-quality security projects.
Top Skills: Ai ApplicationsCC++Cloud InfrastructureEtl PipelinesGoKubernetesLinuxLog PipelinesPythonServerless Computing
3 Hours Ago
In-Office
Sydney, New South Wales, AUS
Senior level
Senior level
Software • Quantum Computing • Metaverse • Infrastructure as a Service (IaaS)
Secures Windows operating systems and devices through security design and code reviews, penetration testing, vulnerability research, fuzzing, and mitigation development. Builds reusable security tools, identifies vulnerabilities and attack vectors, partners with product engineering teams on scalable defenses, and engages with the external security research community.
Top Skills: CC++Windows

What you need to know about the Sydney Tech Scene

From opera to comedy shows, the Sydney Opera House hosts more than 1,600 performances a year, yet its entertainment sector isn't the only one taking center stage. The city's tech sector has earned a reputation as one of the fastest-growing in the region. More specifically, its IT sector stands out as the country's third-largest, growing at twice the rate of overall employment in the past decade as businesses continue to digitize their operations to stay competitive.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account