About the Role
Shape how AI security is embedded across Zip’s next generation products, LLM applications and agentic workflows, helping protect millions of customers and merchants.
Responsibilities
- Lead security reviews and threat modelling activities across AI-enabled products, LLM applications, RAG systems, agentic workflows and AI APIs
- Identify and assess AI-specific threats including prompt injection, model abuse, sensitive data disclosure, insecure output handling, excessive agency and model or data poisoning risks
- Design and implement secure AI patterns including least-privilege access controls, output validation, audit logging, monitoring, abuse detection and human approval workflows
- Partner with Engineering teams to embed AI security controls into SDLC, CI/CD, MLOps and LLMOps practices
- Contribute to AI governance frameworks, standards, policies and control mapping activities across the organisation
- Review third-party AI vendors, SaaS AI capabilities and model providers to support secure and compliant adoption of AI technologies
- Help develop AI security tooling, testing approaches and monitoring capabilities to proactively identify and reduce risk before production deployment
- Deliver practical guidance and awareness sessions that improve understanding of AI security risks, controls and secure design practices across technical and non-technical teams
Requirements
- 5+ years experience across security engineering, application security, cloud security, product security, security architecture, penetration testing or red teaming
- Hands-on experience securing or reviewing AI/ML, LLM, RAG or agent-based systems
- Threat modelling capabilities with the ability to translate security risk into practical engineering outcomes
- Experience across web and API security, IAM, secrets management, secure SDLC, cloud security, logging, detection and incident response
- Programming experience with Python or another modern programming language
- Familiarity with LLM architectures, vector databases, embeddings, AI agents and modern AI data flows
- Exposure to frameworks such as OWASP LLM Top 10, MITRE ATLAS, NIST AI RMF, Google SAIF or ISO/IEC 42001 is highly regarded
- Expert communication and stakeholder engagement skills, with the ability to influence and collaborate across technical and business teams
- A mindset that embraces AI and new tools to adapt, learn and grow
- An aptitude for identifying and managing risks
- Our values in your DNA: Customer First, Own It, Stronger Together and Change the Game
Skills
- AI security
- Application security
- Cloud security
- Security engineering
- LLMs
- RAG systems
- AI APIs
- Web security
- API security
- IAM
- Secrets management
- Secure SDLC
- Cloud security
- Logging
- Detection
- Incident response
- Python
- LLM architectures
- Vector databases
- Embeddings
- AI agents
- AI data flows
- OWASP LLM Top 10
- MITRE ATLAS
- NIST AI RMF
- Google SAIF
- ISO/IEC 42001
Location
- Sydney
- Melbourne
Work Type
- Hybrid
Experience Level
- Senior
- 5+ years experience
Benefits
- 25 days paid leave annually, including birthday leave and quarterly wellbeing days
- 16 weeks paid parental leave for primary carers, and 4 weeks for supporting carers
- Family support policies including miscarriage bereavement leave and domestic violence leave
- Mental health and wellness initiatives, including $299 annual wellbeing allowance, free access for you and family members to our EAP service Sonder, discounted private health insurance and great rates on fitness sessions through ClassPass
- 2 days paid volunteering leave per year
- Access to the Flare Benefits Hub and Novated Leasing for savings across lifestyle, essentials and wellbeing
- Fee-free Zip products, and discounts with Zip merchant partners
- Team social events, epic offices, free breakfast daily, and weekly free lunches
About the Company
- Zip’s Technology function is responsible for building and maintaining seamless, secure and sustainable platforms that enable customers to shop with confidence and merchant partners to grow their brands.
- Zip Co Limited (ASX: ZIP) is a digital financial services company, offering innovative, people-centred products that bring customers and merchants together.
- Operating in two core markets - Australia and New Zealand (ANZ) and the US, Zip offers point-of-sale credit and digital payment services, connecting millions of customers with its global network of tens of thousands of merchants.
- We’re proud to be a values-led business and our values - Customer First, Own it, Stronger Together and Change the Game - guide us in everything we do.
Equal Opportunity
- Be a part of a team that reflects the diversity of our customers
- We pride ourselves on being a workplace that provides equal opportunities to people of all ages, cultural backgrounds, sexual orientations, gender identities, abilities, veteran status, and everything else that makes you unique.
- Equally, we’re committed to ensuring our recruitment processes are accessible and inclusive. Please let us know If there are any adjustments that need to be made to ensure you have a fair and equitable experience.
