Principal Security Engineer | Cyber Security Advisor | Contract

About The Missing Link

The Missing Link is a leading Australian IT and Cyber Security services provider. We’re seeking an experienced Principal Security Engineer / Cyber Security Advisor for a 12-month contract engagement in Melbourne, with potential for extension.

This is a senior, consulting-led role combining security engineering, architecture, cloud security and cyber risk advisory within a complex enterprise environment.

About the Role

You’ll act as a trusted technical security advisor, working across engineering, architecture and business teams to deliver secure-by-design solutions and pragmatic, risk-based security controls.

The environment spans AWS/GCP, application security, IAM, DevSecOps, network security, threat modelling and governance, with a strong focus on Australian financial services regulation.

Requirements

Key Responsibilities

• Lead security architecture reviews, solution assessments and threat modelling
• Conduct comprehensive security risk assessments
• Design secure architecture patterns, controls and cloud security standards
• Provide security guidance across AWS and/or GCP
• Embed security controls into DevSecOps and CI/CD environments
• Advise across IAM, SSO, PAM and federated identity
• Develop practical, risk-based controls and manage security exceptions
• Partner with engineering, architecture, risk and business stakeholders
• Ensure solutions align with relevant regulatory and security frameworks
• Provide senior technical security leadership and mentoring

About You

You’re an experienced security practitioner with broad capability across security engineering, architecture and risk, rather than a specialist in only one security technology.

Essential Experience

• Significant senior-level cyber security engineering or security architecture experience
• Strong AWS and/or GCP cloud security capability
• Security architecture, threat modelling and risk assessment experience
• Strong knowledge across IAM, AppSec, network security and DevSecOps
• Experience with CI/CD security, SAST, DAST, SCA and security automation
• Understanding of Terraform/IaC, Docker and Kubernetes
• Experience with modern identity platforms such as Microsoft Entra ID and/or Okta
• Strong understanding of risk-based security control design
• Experience working in highly regulated enterprise environments
• Knowledge of APRA CPS 234, CPS 230, ISO 27001, NIST CSF, Essential Eight and the Privacy Act 1988
• Strong stakeholder management and the ability to influence technical and senior business stakeholders

Desirable Certifications

CISSP, CISM, CCSP, AWS Security Specialty or Google Professional Cloud Security Engineer certifications will be highly regarded but are not mandatory.

Benefits

Contract Details

• 12-month contract, with potential extension
• Melbourne
• Hybrid
• Senior / Principal-level engagement

Apply Now

If you’re a senior Security Engineer, Security Architect or Cyber Security Advisor looking for a long-term Melbourne contract where you can combine hands-on security expertise with strategic advisory and risk, we’d like to hear from you.