Senior Security Platform Engineer I

Senior Security Platform Engineer I Strong cloud security engineering experience with AWS, Infrastructure as Code and modern security tooling such as EDR/XDR or SASE platforms Help shape the security foundations that protect Zip and millions of customers by building scalable, automated security platforms across cloud and endpoint environment Hybrid working from our Sydney office, collaborating closely with platform and DevOps teams Write your story with a career at Zip Join Zip’s Technology function, responsible for building and maintaining seamless, secure and sustainable platforms that enable customers to shop with confidence and merchant partners to grow their brands. Within our Security and DevSecOps Engineering team, you will help shape the platforms and controls that keep Zip’s systems, data and customers safe. This is a hands-on engineering role where you will design, build and continuously improve the security control plane that protects our cloud and endpoint environments. Working closely with platform engineers and DevOps teams, you will embed security directly into the way we build and run systems. From automating guardrails to integrating security tooling and improving detection quality, you will help ensure security scales alongside Zip’s rapidly evolving technology landscape. What you'll Own Own and operate key security platforms that protect Zip’s infrastructure and endpoints Design and implement integrations between security tooling and cloud environments to strengthen our security posture Embed security controls into CI/CD pipelines and engineering workflows so protection is built into the development lifecycle Automate guardrails using Infrastructure as Code and policy as code approaches Tune and optimise security tooling to improve performance, coverage and signal quality Partner with DevOps and platform teams to implement secure cloud and infrastructure configurations Define and maintain security baselines across identity, device and workload trust Support the ongoing evolution of Zero Trust capabilities across the organisation What you'll bring to the team Proven experience in cloud security engineering, ideally within AWS environments Hands on experience working with modern security tooling such as EDR or XDR platforms, SASE solutions, identity controls or device trust models Experience building and managing Infrastructure as Code using tools such as Terraform or CloudFormation Ability to develop integrations and automation using APIs and scripting languages such as Python or Bash A strong engineering mindset with an automation first approach to security controls Experience improving detection workflows and tuning security tools to reduce noise and increase signal Comfortable working cross functionally with platform and DevOps teams to embed security into engineering processes Ability to translate security policy and risk requirements into scalable technical controls A mindset that embraces AI and new tools to adapt, learn and grow. An aptitude for identifying and managing risks. Whether you are a People Manager or an Individual Contributor, we are all leaders at Zip, therefore effective risk management is important to how we run our business and part of all our roles. Our values in your DNA: Customer First, Own It, Stronger Together and Change the Game What you’ll get in return As we write this next exciting chapter in our story, we will continue to move at pace and embrace change. For you, this might mean opportunities to learn new skills with hands-on experience, broader responsibilities, or the buzz of seeing your work impact customers faster. Zip is a place where you’ll get out exactly what you put in. When you join the team, we'll do our best to make sure you can be yourself and surround yourself with smart, friendly colleagues and leaders who have your back, so that you can make the big things happen. Zipsters tell us these are just some of the best things about working here. You’ll also receive:…