{"id":171483,"url":"https://alion.io/job/creditorwatch-security-engineer-saas","title":"Security Engineer (SaaS)","company":{"id":60426,"name":"CreditorWatch","domain":"creditorwatch.com.au","url":"https://alion.io/company/creditorwatch","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":100,"open_postings":5,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":44,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-27T00:00:00Z","employer_posted_date":"2026-08-27","last_verified_at":"2026-10-17T11:27:45Z","board_verified":true,"closed_at":null,"days_open":51,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":51},"description":"⭐⭐ New Headcount!! ⭐⭐\nWho are we?\nSo you might ask, who’s CreditorWatch? We are a leading Australian data and technology company that provides businesses with access to unique data and innovative products. By using our platform, our customers can confidently manage their commercial relationships, improve productivity and reduce financial risk.\nAs a commercial credit reporting bureau, we offer a complete suite of credit reporting products and data insights covering the entire customer lifecycle-from customer onboarding and credit decision automation to credit risk management and automated collections.\nWe were established in 2010 and have been named one of AFR’s Top 10 Best Places to Work, as well as certified by Great Place to Work consecutively across 2022-2025.\nWe are scaling at pace, making this an exciting time to join CreditorWatch.\nOur Purpose\nEmpower Australian businesses to trade confidently with their customers.\nOur Mission\nWe aim to be number one in our industry by delivering unique data insights and innovative products.\nYour Role & Team\nAs we continue to invest in our security tooling and capabilities, we are establishing a dedicated Security Engineering function to ensure we are not just purchasing security platforms, but actively operating, tuning, and integrating them effectively.\nWe are looking for a Security Engineer to join this newly created team. This is a hands-on, generalist role spanning both enterprise/internal security (IAM, Zero Trust, DLP, SSE, EDR) and product security (application security, vulnerability management, SDLC hardening, security reviews). You will split your time across both domains-helping to protect our corporate environment while embedding security into the way our engineering teams build and deliver software.\nThis is not a narrow, single-domain role. You will work across the full stack-from employee endpoints and SaaS platforms through to CI/CD pipelines, cloud infrastructure, and the application layer. You will act as a trusted partner to Engineering, a technical resource for the broader business, and a key contributor to maintaining the security posture expected of an Australian credit bureau handling sensitive financial data.\nYou'll report directly to the Principal Product Security Engineer in this role.\nPlease note, it's a full-time opportunity offering hybrid working conditions out of our Sydney CBD Office.\nSome of your responsibilities include and are not limited to:\nEnterprise & Internal Security\nImprove the security posture across our SaaS platforms, employee endpoints, and office networks. \nImplement, tune, and operate enterprise security solutions including SSE, EDR, DLP, Email Security, and IAM.\nEnhance threat detection and response capabilities, contributing to operational runbooks and owning security alert workflows.\nProduct & Application Security\nStrengthen the security posture of our platform and SDLC through security reviews, threat models, risk-based assessments\nIdentify vulnerabilities and provide practical remediation strategies aligned to business impact.\nEmbed and operationalise security controls within CI/CD pipelines (SAST, SCA, secrets detection) with clear ownership, SLAs, and automated feedback loops.\nDrive initiatives to harden the software supply chain and CI/CD infrastructure, enabling secure development and deployment practices. \nCross Organisation\nAct as a trusted advisor to Engineering, providing guidance on secure development practices across CreditorWatch products and services. \nContribute to frameworks, guidance and tooling that enable engineers to safely adopt AI/ML capabilities in software development. \nMentor engineers and security champions to uplift security awareness and foster a proactive security culture. \nContribute to vulnerability management processes, ensuring findings are tracked, prioritised, and remediated in line with risk tolerance and SLOs.\nProvide domain expertise in security-related incident response processes. \nSupport compliance and assurance activities (ISO 27001, SOC 2) where they intersect with engineering controls and evidence.\nOur ideal candidate\nDemonstrated hands-on experience across multiple security domains, with the ability to operate as a broad generalist \nExperience with application security practices, including secure code review, SAST/SCA tooling, threat modelling, and vulnerability management in cloud-native or SaaS environments \nWorking knowledge of cloud security (preferably AWS), including IAM, networking, and services such as Security Hub, Inspector, or GuardDuty \nExperience embedding security into CI/CD pipelines and working closely with engineering teams to shift security left without impacting delivery \nFamiliarity with enterprise security tools such as EDR, SSE/SWG, DLP, email security, and ASPM platforms \nStrong understanding of identity and access management concepts, including SSO (OAuth, OIDC, SAML), conditional access, and least privilege \n Exposure to relevant compliance frameworks (e.g. ISO 27001, SOC 2, OWASP Top 10) \nAbility to script or automate workflows using tools such as Python, Bash, or APIs \nStrong communication skills, with the ability to translate security findings into practical guidance for engineers and articulate risk to non-technical stakeholders \nA genuine interest in working across a broad range of security domains and context-switching as required\nMore than just work\nKeep Active - All employees get a Fitness First Platinum gym membership.\nDaily Fuel - Barista-made coffee, breakfast, snacks, lunches and drinks on us - we got you!\nPhone Credits - We pay you $50 per month to put towards your plans - how good.\nWellness Days - Receive an additional day off each month. Whether you’re pursuing physical activities, cultivating your mental wellbeing or supporting your community… this is your time to switch off from work.\nMonthly Massages - We offer monthly in-house massages to soothe those sore spots and tight knots. Poor posture? Stressful week? We get it.\nBonus Shares - We offer our dedicated employees’ performance-based bonuses. Our employees are also permitted to gain access to our bespoke Employee Share Scheme, giving you the rare opportunity to invest in a growing technology company.\nFun Activities - We love escaping the workplace to do fun stuff. Whether its pasta-making, sailing classes, touch footy, winery tours, go karting or relaxing on the company boat (yeah… we own a boat) - these monthly team building activities will keep you feeling valued and connected.\nLegal Services - Our employees get access to free legal services - from conveyancing and property advice to legal assistance around wills, trusts, powers of attorney and more. We make life easier for you, saving you time, money and unnecessary headaches.\nOur Values\nThe 1%’ers add up - Our commitment to going that one step further sets us apart, as we believe that small efforts or improvements in any aspect of our work collectively lead to significant success.\nWe are dependable and trustworthy - Our clients are everything to us and we are passionate about maintaining and delivering reliable and trusted services to them.\nWe are committed to growth - Our success comes from our ability to grow and adapt; both collectively and individually. We set the bar high to ensure we continue to innovate and exceed expectations. We are dedicated to the development of our business and our people.\nOur people make the difference - Just as we help small businesses think big, we help our employees achieve their aspirations. We provide our people with challenges and opportunities, supporting them to live their best lives.\nRecruitment Process - We like to keep it simple!\n Phone Screening - A deep dive into the company, role and experience required, including a thorough review of your match to the role - let’s get to know each other and ensure the opportunity is a match!\n Hiring Manager Meeting - This is an opportunity to showcase why your background and skill set aligns to the role and ask questions - be as curious as you want!\n Functional Meeting - Here you’ll be set up with a take home case-challenge that is designed to look into the way you think and approach certain situations.\n Values Meeting - We’d love to hear why CreditorWatch and see how you’d fit into our world.\nWe are committed to you\nWe offer a fantastic culture with open communication and rewards and recognition that include probation celebrations, all-staff birthday and service anniversary celebrations.\nWe are an equal opportunity employer and committed to excellence through diversity. We do not discriminate on race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.","description_format":"text","description_chars":8746,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Gym membership","Hybrid work"],"hiring_locations":[{"name":"Australia","iso":"AU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Software","Cybersecurity","Credit Bureaus & Rating Agencies"],"lifecycle":[{"event":"open","at":"2026-08-30T00:54:55Z"}],"visa":[],"liveness":{"score":34,"band":"fade","label":"Fading","p_open":1,"p_active":0.62,"p_room":0.55,"age_days":51,"expected_fill_days":44,"reasons":["conf:0","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/creditorwatch-security-engineer-saas","json_url":"https://alion.io/job/creditorwatch-security-engineer-saas.json","meta":{"generated_at":"2026-10-17T13:37:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18364,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":60426},"rest":"https://alion.io/mcp/rest/get_company?id=60426"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcreditorwatch-security-engineer-saas"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcreditorwatch-security-engineer-saas"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcreditorwatch-security-engineer-saas"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/creditorwatch-security-engineer-saas\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcreditorwatch-security-engineer-saas"}]}