Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Staff Security Engineer (AppSec) role.

Rezi rewrites your resume against CreditorWatch's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Staff Security Engineer (AppSec) posting at CreditorWatch — free, in seconds.

About the Role

We are looking for a Staff Product Security Engineer to shape the evolution of security engineering at CreditorWatch. This senior, hands-on individual contributor role involves tackling complex security challenges across corporate environments, AWS cloud platforms, and the software supply chain. You will collaborate with Engineering, Platform, Data, IT, and Risk teams to influence technical decisions, establish secure design patterns, and embed security into software development and delivery processes. As a technical expert, you will lead cross-functional initiatives, strengthen security architecture, and guide engineers in safely adopting emerging technologies like AI, while also providing technical guidance to build sustainable security capabilities.

Responsibilities

Shape security engineering and architecture by defining and implementing security standards, reference architectures, and reusable guardrails.
Lead threat modeling, secure design reviews, and risk assessments to integrate security by default.
Drive automation and scalable security controls, detections, and evidence across platforms.
Act as a technical authority on complex security decisions, incidents, and risk trade-offs.
Secure cloud and software supply chains by designing and implementing AWS security controls (IAM, network segmentation, workload protection, CSPM).
Strengthen CI/CD and software supply chain security using SAST, SCA, secrets detection, IaC, and container security.
Embed automated security checks and feedback loops into the SDLC.
Deliver the identity and Zero Trust roadmap across SaaS, endpoints, and cloud.
Establish frameworks, guidance, and tooling for the safe adoption of AI/ML capabilities.
Develop security patterns for AI agents and agentic development tools.
Assess emerging technologies and security platforms, translating threats into practical controls.
Drive long-term security improvements that scale with the technology environment.
Lead through technical influence by mentoring security engineers and uplifting security capability across Engineering.
Partner with technical and business leaders to translate complex security risks into actionable recommendations.
Contribute technical expertise to ISO 27001, SOC 2, and relevant regulatory assurance requirements.

Requirements

6+ years of hands-on security engineering experience across multiple domains, preferably in a cloud-native, SaaS, or financial services environment.
Strong AWS security experience across multi-account architecture, IAM, networking, workload hardening, and native security services.
Experience with secure design reviews, threat modeling, code reviews, and SAST/SCA/DAST tooling.
Experience securing CI/CD pipelines, infrastructure as code, containers, secrets management, and build integrity.
Ability to write production-quality code in Python, Go, TypeScript, or a similar language.
Ability to automate security workflows through scripting and APIs.
Working knowledge of EDR, SSE/SWG, DLP, email security, IAM, and Zero Trust, including OAuth, OIDC, SAML, and privileged access.
Applied knowledge of cryptography, PKI, TLS, and data protection.
Exposure to ISO 27001, SOC 2, and OWASP.
Proven ability to influence senior engineers, shape security architecture, and lead cross-functional initiatives.
Ability to explain complex security risks clearly, influence stakeholders, and develop the capability of engineers.
Preference for sustainable, scalable security improvements over isolated fixes.
Comfort working across a broad range of technical domains.

Skills

AWS Security
IAM
Network Segmentation
Workload Protection
CSPM
SAST
SCA
DAST
Secrets Detection
Infrastructure as Code (IaC)
Container Security
CI/CD Security
Software Supply Chain Security
Zero Trust
SSO
Conditional Access
Privileged Access Management
AI/ML Security
Threat Modeling
Secure Design Reviews
Risk Assessment
Python
Go
TypeScript
Scripting
APIs
EDR
SSE/SWG
DLP
Email Security
OAuth
OIDC
SAML
Cryptography
PKI
TLS
Data Protection
ISO 27001
SOC 2
OWASP

Location

Sydney CBD

Work Type

Full-time
Hybrid

Experience Level

6+ years
Senior

Benefits

Fitness First Platinum gym membership
Complimentary barista-made coffee, breakfast, snacks, lunches, and drinks
$50 monthly phone credit
One additional wellness day off per month
Monthly in-house massages
Team activities and social events (wine tasting, sailing, escape rooms, darts, boat days)
Bring Your Family to Work Day
State-of-the-art office space
Professional development opportunities
Employee Assistance Program (EAP)

About the Company

CreditorWatch is a leading Australian data and technology company transforming how businesses manage commercial risk, make credit decisions, and improve cash flow.
Since 2010, CreditorWatch has helped thousands of businesses make smarter decisions through its data, insights, and technology.
Following its acquisition by global private equity firm Warburg Pincus, CreditorWatch is focused on scaling its impact and shaping what comes next.
The company has been recognized as one of the AFR's Top 10 Best Places to Work and certified by Great Place to Work across 2022–2025.
Purpose: Empower Australian businesses to trade confidently with their customers.
Mission: To be number one in the industry by delivering unique data insights and innovative products.

Equal Opportunity

We are committed to creating an inclusive workplace where everyone can thrive.
We are proud to be an equal opportunity employer and welcome people from all backgrounds.