Senior Security Engineer

Organization: At CommBank, we never lose sight of the role we play in other people s financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact

Job Title: Senior Security Engineer
Location: Bangalore

Business And Teams:

Group Security is part of Technology and brings together capabilities across Group Security Office, Group Cyber Security, Protective Security and Business Resilience, Group Fraud Technology, Group Fraud Management Services and Cyber Defence Operations.

The team works to safeguard a brighter future for all by securing the bank, protecting customers, recovering from the bad day and creating an amazing and admired place to work.

You ll be part of a team focused on creating a cyber-secure organisation through intelligent governance, protection, detection, response, recovery and resilience.

The Security Design Centre of Excellence plays an important role in enabling secure-by-design practices, DevSecOps adoption, reusable security patterns, automated risk assessment and security guardrails that can be consumed by engineering teams across the organisation.

Impact & Contribution

As a Senior Security Engineer, Security Design Centre of Excellence, you ll help shape how security is embedded into modern engineering practices across the Group.

This role sits at the intersection of security architecture, security engineering, artificial intelligence-enabled risk assessment and DevSecOps transformation. You ll help simplify the adoption of security capabilities by developing reusable security patterns, automating security controls and enabling secure outcomes throughout the Software Development Lifecycle.

You ll work closely with engineering, architecture, platform and cyber security teams to modernise security delivery through automation, AI and GenAI integration, threat modelling and scalable security design practices.

Roles & Responsibilities

• Lead security design reviews, architecture assessments and threat modelling activities for strategic technology initiatives.
• Develop and maintain enterprise security patterns, reference architectures, standards and guardrails.
• Design and implement automation for security risk assessments, control validation and continuous assurance.
• Embed security controls into Software Development Lifecycle and CI/CD pipelines to support secure delivery at scale.
• Apply cloud and platform security expertise to design secure cloud-native solutions and automated compliance controls.
• Build secure APIs, integrations, data pipelines and security visualisation capabilities using modern engineering practices.
• Partner with cyber security, architecture, engineering and platform teams to improve developer experience and security outcomes.
• Mentor engineers and security practitioners in secure design, DevSecOps and threat modelling practices.

Essential Skills

• Experience in security engineering, security architecture, security design, DevSecOps or a related field.
• Strong experience with security architecture, threat modelling and technical risk assessment.
• Practical experience implementing secure-by-design and DevSecOps principles in complex technology environments.
• Experience automating security controls, assessments, governance processes or continuous assurance activities.
• Hands-on experience with cloud platforms, Infrastructure as Code, CI/CD tooling, containers or platform engineering.
• Programming experience with languages such as Python or TypeScript, plus experience building APIs or integrations.
• Familiarity with threat modelling and security frameworks such as MITRE ATT&CK, OWASP, NIST or STRIDE.
• A collaborative and outcome-focused approach, with the ability to influence security decisions across engineering and technology teams.

Education Qualification:
Bachelor s degree or master s degree in engineering in Computer Science/Information Technology