[Hiring] Senior Security Engineer @Zepto

Role Description

As a Senior Security Engineer (Product Security), you will play a significant role in keeping our product safe and secure by building on and maturing Zepto's product security practices. You will work hands-on and shoulder-to-shoulder with Engineering and Product teams, providing guidance and coaching across the software development life cycle while continuing to raise the bar on our security expectations and capability.

This is a security role at its core, but not a gatekeeping one. We are builders – we expect you to read and write production-level code, build tooling and automation, and contribute paved-road solutions that engineers actually want to use.

Reporting to the Security Engineering Lead, you will work closely with them to develop and build Zepto's product security strategy and approach. You will apply a consultative and advisory approach when working with the wider Zepto team, empowering them to work confidently and to use the self-service capabilities you help establish.

We have excellent working relationships with our developers and we need to keep it that way. We are not the team of no. We are the team that helps make things better.

Zepto is moving quickly towards an AI-native way of building and operating. You will be someone who is already experimenting with AI and agentic tooling, or is genuinely keen to, and who is open to developing the skills to secure these systems as we adopt them.

Within the Security team, you are the go-to person for:

• Secure development practices
• Vulnerability management
• Security architecture advice

Working in a scale-up means you get the opportunity to flex your skills in a variety of ways. You can, however, expect your day to day to be involved in the following:

• Coach engineering teams and collaborate to ensure every step of the software development life cycle follows security best practices
• Design, build and maintain security tooling, automation and paved-road controls as production-quality software
• Conduct security assessments and architecture reviews of Zepto's applications and services
• Embed within project teams to ensure they are effectively considering information security risk and prioritising security controls
• Establish and document security architecture and practices in collaboration with the Security Engineering Lead, Product and Engineering teams
• Work with the Security Engineering Lead to support Zepto's adoption of AI and agentic systems, and experiment with AI tooling to improve how the Security team works
• Help manage application security incidents in collaboration with the rest of the Security team

Qualifications

• Proven knowledge of security best practices and how to implement them in a scale-up environment
• The ability to read and write production code and build tooling and automation, with a software engineering foundation (Go and/or Python preferred, but engineers in any language will be considered)
• Experience implementing and maintaining common application security tooling
• Hands-on experience automating security controls
• Experience working in cloud infrastructure (AWS)
• Proven experience advising engineering teams on security architecture best practices
• Actively experimenting with, or a demonstrated appetite to experiment with, AI and agentic technologies, and an interest in securing them
• A strong and empathic communicator with both technical and non-technical teams

Requirements

• While Zepto is a remote-first organisation with a national footprint, our preference is for this role to be based in Melbourne, Sydney or Brisbane.
• We’re looking for Zeptonians who hold long-term, permanent status in Australia—specifically Australian Citizens or Permanent Residents.
• While we’d love to welcome everyone, we aren't equipped to offer visa sponsorship or consider temporary work visas for this role right now.

Benefits

• Join a Talented Team: Work with world-class talent and leaders who support career growth
• Flexible Work: A remote-first work culture, with the opportunity to work anywhere in Australia. You’ll also get access to premium co-working spaces and a Byron, Sydney & Melbourne Hub
• Paid Parental Leave: 12 weeks Paid Parental Leave for primary caregivers and 4 weeks for secondary caregivers
• Wellbeing Focus: Access to Zepto’s Wellbeing Menu, which includes 3 x paid Wellbeing Days per year and access to an Employee Assistance Program
• Annual Learning Budget: An individual learning budget, and 4 x paid Growth & Impact Days annually to focus on professional development
• Remote-Work Support: A $500 Remote Work Budget to set up your home office upon commencement, and $300 annually from your 2nd Zeptoversary

Company Description

As an organisation in the financial services industry, we conduct background checks as part of our recruitment process.