430,210open jobs
14,612companies
64,442added this week
Browse all
Salary
$94k – $232k per year (Estimated)
Location
In office (Australia, Melbourne)
Seniority
Principal
Employment
Full-Time
Overview
Company
Impact
Profile match
Commonwealth Bank of Australia is the country's largest bank, established by federal legislation in 1911 as a government-owned institution and fully privatised by 1996. It serves roughly one in three Australians across retail deposits, home lending, business banking and institutional markets, and holds the largest share of the domestic mortgage market. The bank has invested unusually heavily in technology for its size, rebuilding its core systems and pushing the CommBank application into a broader financial and lifestyle platform, and it runs the venture arm x15ventures to build and buy adjacent digital businesses.

Principal Product Security Engineer

  • Influence security outcomes across Retail Banking technology at enterprise scale

  • Drive innovation through AI, automation and secure-by-design engineering practices

  • Mentor engineers and uplift application security capability across multiple technology domains

Do work that matters:

At CommBank, we're building tomorrow's bank today. Technology is at the heart of everything we do and security is fundamental to providing safe, secure and trusted experiences for millions of customers.

We are seeking a Principal Product Security Engineer to join Group Security. This is a highly influential role focused on improving how security is embedded across our software engineering practices, helping teams build secure products at speed while continuously uplifting security capability across the organisation.

You'll work across a broad range of Retail Banking portfolios, partnering with engineering teams, technology leaders and security specialists to drive practical security outcomes. This is an opportunity to shape the future direction of application security through innovation, automation and modern engineering practices.

See yourself in our team:

Group Security safeguards a brighter future for all by securing the bank, protecting our customers and enabling technology teams to deliver safely at speed. We partner across the organisation to embed security earlier in the development lifecycle and help teams build secure, resilient and trusted experiences for millions of customers.

As part of our Product Security capability, you will play a key role in strengthening secure engineering practices, reducing risk and driving the evolution of product security across Retail Banking technology portfolios.

On any given day, you will:

  • Lead application security initiatives across multiple technology domains and delivery streams

  • Partner with engineering teams to identify security risks and drive pragmatic remediation strategies

  • Perform and guide application security assessments, including source code reviews and security testing activities

  • Embed secure-by-design principles throughout the software development lifecycle

  • Influence security outcomes across complex and fast-paced engineering environments

  • Develop new approaches that leverage automation and AI to improve security effectiveness and scalability

  • Mentor engineers and security practitioners, helping uplift capability across the organisation

  • Support the continuous evolution of application security standards, practices and ways of working

  • Work closely with stakeholders to balance security, customer experience and delivery objectives

We are interested in hearing from people who have:

  • Deep expertise in Application Security or Product Security, leading end-to-end security engagements and influencing secure design, engineering and delivery outcomes at scale.

  • Deep understanding of secure software development practices and common application security vulnerabilities

  • Experience conducting security assessments, source code reviews and application security testing activities

  • Demonstrated ability to influence engineering teams and security outcomes within large and complex organisations

  • Experience working within modern software engineering environments, including cloud-native and DevSecOps practices

  • Strong technical problem-solving skills combined with an ability to communicate effectively with both technical and non-technical stakeholders

  • A passion for mentoring others and building security capability at scale

  • An interest in emerging technologies and the practical application of AI and automation within security.

If you're already part of the Commonwealth Bank Group (including Bankwest, x15ventures), you'll need to apply through Sidekick to submit a valid application. We’re keen to support you with the next step in your career.

We're aware of some accessibility issues on this site, particularly for screen reader users. We want to make finding your dream job as easy as possible, so if you require additional support please contact HR Direct on 1800 989 696.

Advertising End Date: 21/09/2026
Free account
Stop reading job ads. Get the ones that fit.
One free account turns this page into a shortlist built around your stack, your level and your pay.
Match on every job. Stack, seniority, pay and location, scored against your profile.
430,210 open roles. Read straight off company career pages, refreshed every day.
Unlimited applications. Every one you send is tracked in one place, on-site or on a company board.
3 tailored CVs a month. Rewritten for the exact job you are applying to. Included free.
Create a free account
Free forever. No card. Under a minute.

Recommended for you based on this role

Similar stack
Same company
Melbourne
$98k – $204k per year (Estimated) • In office • Full-Time • Sydney
Apply
Credit Risk Analyst 6 hours ago
$40k – $94k per year (Estimated) • In office • Full-Time • Sydney
Python
SQL
SAS
Apply
$22k – $59k per year (Estimated) • In office • Full-Time • 12+ years exp • Bachelor's Degree • Bengaluru
C#
ABAP
C#
.NET
DevOps
Incident Management
SLI/SLO/SLA
Apply
$71k – $160k per year (Estimated) • In office • Full-Time • Sydney
DevOps
Incident Management
Apply
$104k – $240k per year (Estimated) • In office • Full-Time • Melbourne • Sydney
Python
Java
SQL
Databases
PostgreSQL
Apache Iceberg
Apache Kafka
Kafka
AI/ML
Spark
Flink
DevOps
Splunk
GitHub Actions
Datadog
CI/CD
AWS
Grafana
AWS Lambda
GitHub
Amazon S3
Amazon CloudWatch
Amazon Kinesis
Analytics
AWS Glue
Apply
$126k – $258k per year (Estimated) • In office • Full-Time • Sydney • Melbourne
Python
JavaScript
Node JS
AI/ML
AI Agents
LLM Guardrails
Frontend
React.js
DevOps
CI/CD
AWS
Apply
$107k – $246k per year (Estimated) • In office • Full-Time • Melbourne • Sydney
Python
SQL
AI/ML
Fine-tuning
Embeddings
AI Agents
RAG
Agentic Workflows
DevOps
GitHub Actions
CI/CD
Vector
GitHub
Apply
$82k – $179k per year (Estimated) • Remote/Hybrid • Full-Time • Melbourne
JavaScript
DevOps
CI/CD
Apply
$80k – $120k per year • Remote • Full-Time • 3+ years exp • Melbourne
AI/ML
LLM
Anomaly Detection
Red Teaming
EU AI Act
NIST AI RMF
Cybersecurity
ISO 27001
MITRE ATT&CK
NIST CSF
Apply
$142k – $292k per year (Estimated) • In office • Full-Time • 10+ years exp • Bachelor's Degree • Sydney • Melbourne
AI/ML
AI Agents
Apply
See all jobs
This is one of many
430,210 more open roles from verified company boards, updated every day.