Senior Security Platform Engineer
Zip Co Limited
Salary undisclosed
Need a reasonable accommodation to apply or interview? Contact us.
JobMinglr uses automated technology to recommend jobs based on profile information and job preferences. Match Score does not determine eligibility for a position, prevent a user from viewing or applying to a job, or make hiring decisions on behalf of an employer.
Description
Senior Security Platform Engineer
- Strong cloud security engineering experience with AWS, Infrastructure as Code and modern security tooling such as EDR/XDR or SASE platforms
- Help shape the security foundations that protect Zip and millions of customers by building scalable, automated security platforms across cloud and endpoint environment
- Hybrid working from our Sydney office, collaborating closely with platform and DevOps teams
Write your story with a career at Zip
Join Zip’s Technology function, responsible for building and maintaining seamless, secure and sustainable platforms that enable customers to shop with confidence and merchant partners to grow their brands.
Within our Security and DevSecOps Engineering team, you will help shape the platforms and controls that keep Zip’s systems, data and customers safe. This is a hands-on engineering role where you will design, build and continuously improve the security control plane that protects our cloud and endpoint environments.
Working closely with platform engineers and DevOps teams, you will embed security directly into the way we build and run systems. From automating guardrails to integrating security tooling and improving detection quality, you will help ensure security scales alongside Zip’s rapidly evolving technology landscape.
What you'll Own
- Own and operate key security platforms that protect Zip’s infrastructure and endpoints
- Design and implement integrations between security tooling and cloud environments to strengthen our security posture
- Embed security controls into CI/CD pipelines and engineering workflows so protection is built into the development lifecycle
- Automate guardrails using Infrastructure as Code and policy as code approaches
- Tune and optimise security tooling to improve performance, coverage and signal quality
- Partner with DevOps and platform teams to implement secure cloud and infrastructure configurations
- Define and maintain security baselines across identity, device and workload trust
- Support the ongoing evolution of Zero Trust capabilities across the organisation
What you'll bring to the team
- Proven experience in cloud security engineering, ideally within AWS environments
- Hands on experience working with modern security tooling such as EDR or XDR platforms, SASE solutions, identity controls or device trust models
- Experience building and managing Infrastructure as Code using tools such as Terraform or CloudFormation
- Ability to develop integrations and automation using APIs and scripting languages such as Python or Bash
- A strong engineering mindset with an automation first approach to security controls
- Experience improving detection workflows and tuning security tools to reduce noise and increase signal
- Comfortable working cross functionally with platform and DevOps teams to embed security into engineering processes
- Ability to translate security policy and risk requirements into scalable technical controls
- A mindset that embraces AI and new tools to adapt, learn and grow.
- An aptitude for identifying and managing risks. Whether you are a People Manager or an Individual Contributor, we are all leaders at Zip, therefore effective risk management is important to how we run our business and part of all our roles.
- Our values in your DNA: Customer First, Own It, Stronger Together and Change the Game
What you’ll get in return
As we write this next exciting chapter in our story, we will continue to move at pace and embrace change. For you, this might mean opportunities to learn new skills with hands-on experience, broader responsibilities, or the buzz of seeing your work impact customers faster.
Zip is a place where you’ll get out exactly what you put in. When you join the team, we'll do our best to make sure you can be yourself and surround yourself with smart, friendly colleagues and leaders who have your back, so that you can make the big things happen.
Zipsters tell us these are just some of the best things about working here. You’ll also receive:
- 25 days paid leave annually, including birthday leave and quarterly wellbeing days
- 16 weeks paid parental leave for primary carers, and 4 weeks for supporting carers
- Family support policies including miscarriage bereavement leave and domestic violence leave
- Mental health and wellness initiatives, including $299 annual wellbeing allowance, free access for you and family members to our EAP service Sonder, discounted private health insurance, and great rates on fitness sessions through ClassPass
- 2 days paid volunteering leave per year
- Access to the Flare Benefits Hub and Novated Leasing for savings across lifestyle, essentials and wellbeing
- Fee-free Zip products, and discounts with Zip merchant partners
- Team social events, epic offices, free breakfast daily, and weekly free lunches
Be a part of a team that reflects the diversity of our customers
We pride ourselves on being a workplace that provides equal opportunities to people of all ages, cultural backgrounds, sexual orientations, gender identities, abilities, veteran status, and everything else that makes you unique.
Equally, we’re committed to ensuring our recruitment processes are accessible and inclusive. Please let us know If there are any adjustments that need to be made to ensure you have a fair and equitable experience.
And finally…get to know us
Zip Co Limited (ASX: ZIP) is a digital financial services company, offering innovative, people-centred products that bring customers and merchants together.
Operating in two core markets - Australia and New Zealand (ANZ) and the US, Zip offers point-of-sale credit and digital payment services, connecting millions of customers with its global network of tens of thousands of merchants.
We’re proud to be a values-led business and our values - Customer First, Own it, Stronger Together and Change the Game - guide us in everything we do.
#LI-hybrid
Benefits
- health insurance
- parental leave
About this role
Zip Co is seeking a hands-on security engineer to design and operate the cloud and endpoint protection platforms that safeguard its fintech infrastructure and millions of customers. You'll own key security systems across AWS environments, embed controls directly into CI/CD pipelines, and work closely with platform and DevOps teams to automate guardrails using Infrastructure as Code and policy-as-code approaches. The role balances strategic platform architecture with tactical security tooling—tuning EDR/XDR and SASE solutions, managing integrations via APIs, and continuously improving detection quality to reduce noise.
This position suits someone with proven AWS security engineering experience and hands-on familiarity with modern security platforms and device trust models. You'll need strong Infrastructure as Code skills (Terraform or CloudFormation), scripting ability in Python or Bash, and a track record of translating security policy into scalable technical controls. An automation-first mindset and comfort working cross-functionally are essential; you'll be translating risk requirements into engineering reality alongside teams who move at pace.
The role is hybrid from the Sydney office (note: the listing shows Melbourne, Florida as location but Sydney as the office base—clarify this with the recruiter). Zip offers 25 days annual leave, 16 weeks paid parental leave for primary carers, mental health support including a $299 wellbeing allowance, and access to various lifestyle benefits. The company emphasizes learning opportunities, impact, and a collaborative culture built on its values of Customer First, Own It, Stronger Together, and Change the Game.
This role's local market on JobMinglr
Pay for this role
The employer didn't post a pay range for this role. That usually means pay is set in negotiation, which favors whoever arrives with numbers. Check ranges on comparable Senior Security Platform Engineer postings in Melbourne, and analyze any offer before you accept it.
Before you apply, worth reading
How JobMinglr reads this job
Every listing here is scored against your profile before you apply: skills overlap, experience level, location and work arrangement, each weighted and explained. You see the score and the reasons, not just a list. How the matching works.