{"id":2887937,"url":"https://alion.io/job/humm-group-security-engineer","title":"Security Engineer","company":{"id":2192384,"name":"humm group","domain":"shophumm.com","url":"https://alion.io/company/shophumm","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia","Adelaide, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":61000,"max_usd":145000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":774},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"DLP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"PCI DSS","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Unix","optional":false},{"name":"Windows Server","optional":false}],"status":"live","first_seen_at":"2026-10-20T00:55:40Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-23T05:21:43Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"We Dream. We Design. We Deliver.\nJoin hummgroup, one of Australasia’s most successful and enduring non-bank financial services institutions. We specialise in fast, easy finance with a market-leading range of business asset finance, credit cards and point of sale payment plan solutions designed around the core needs of today’s businesses and retail consumers. Come join our team and be a part of our next chapter of innovation and growth.\nAbout the team\nThe Security Team sits within Digital & Transformation at hummgroup and is responsible for protecting enterprise systems, data, customers and colleagues through effective security controls, risk management and operational discipline.\nThe team partners closely with architecture, engineering, infrastructure, service management, and business teams to strengthen security posture, support regulatory obligations and enable safe, reliable technology outcomes.\nAbout the role\nAs Security Engineer, you will make security a built-in part of how humm group designs, builds and releases software. You will identify, prioritise and drive remediation of application security risk across our internal, customer-facing and third-party platforms.\nYou will work hands-on with engineering and delivery teams across the secure software development lifecycle (SSDLC), from secure design review and threat modelling, through code review and automated security testing in CI/CD pipelines, to penetration testing and vulnerability remediation.\nPartnering with architecture, engineering and risk teams, you will set practical application security standards and guardrails, help teams fix issues quickly without slowing delivery, and provide the evidence needed for audit, PCI DSS and other compliance obligations.\nKey Responsibilities\nKey responsibilities include:\nSecure design and engineering: Lead threat modelling, secure design and code reviews across products, platforms, APIs and high-risk changes. \nSecurity testing and delivery: Manage application security tools, CI/CD quality gates, penetration testing and red team engagements. \nVulnerability management: Triage, prioritise and drive remediation of application, third-party and software supply chain vulnerabilities. \nStandards and emerging risk: Maintain practical security standards and guardrails, including controls for APIs, authentication, secrets and AI-enabled solutions. \nDeveloper enablement: Build secure coding capability through practical guidance, training, reusable patterns and security champions. \nRisk, reporting and compliance: Provide clear security insights, manage responsible disclosure and support PCI DSS, ISO 27001 and audit obligations. \nQualifications & Experience\n4 + years of experience in a cyber security role such as Security Analyst, Security Engineer, or similar.\nRelevant certifications and/or tertiary education, such as:Security Operations, CompTIA CySA+, AWS / Microsoft security certifications or similar\nVendor-specific certifications for SIEM, EDR, firewalls, cloud security, or DLP.\n\nExperience with SIEM platforms, automation, threat hunting, and intelligence.\nFirewalls, proxies, secure web gateways, endpoint detection and response, application whitelisting, routers, switches, micro-segmentation, NDR, DLP, SSE and web application firewalls.\nMicrosoft 365, AWS, Azure, Windows Server, Linux/Unix, iOS and Android.\nWeb application security, vulnerability scanning, DevSecOps pipelines, penetration testing support.\nExperience with risk assessments, SOPs, playbooks, guidelines, compliance frameworks (PCI DSS, ASD Essential 8, ISO 27001, NIST).\nAbout you\nAbility to produce clear operational-level reporting.\nStrong analytical and problem-solving mindset.\nAbility to work independently in fast-paced environments.\nEffective communicator who can simplify technical concepts for non-technical stakeholders.\nCollaborative team player committed to improving organisational security maturity.\nHigh levels of integrity, accountability, and attention to detail.\nIdeal for technically capable cyber security professionals, this role suits someone who thrives in fast-paced environments, enjoys solving complex security challenges, and wants their work to have real, visible impact.\nWorking at hummgroup\nWe embrace flexible working arrangements, ensuring a genuine work-life balance and a fun, vibrant inclusive culture that embraces diverse perspectives and values the unique contributions of each of our team through our behaviours Curious - Adaptable - Tenacious - Accountable - Respectful.\nWe invite candidates of all gender expressions, ethnicities, ages, and other culturally diverse groups to apply. We are committed to making reasonable adjustments to provide a positive, barrier-free recruitment process and welcoming and supportive environment where all our people can thrive.\nIf this sounds like the opportunity, you have been looking for then apply today!","description_format":"text","description_chars":4901,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cards & Card Issuing","Business & SME Lending","Buy Now, Pay Later"],"lifecycle":[{"event":"open","at":"2026-10-20T00:55:40Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":3,"expected_fill_days":33,"reasons":["conf:0","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/humm-group-security-engineer","json_url":"https://alion.io/job/humm-group-security-engineer.json","meta":{"generated_at":"2026-10-23T11:04:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16833,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2192384},"rest":"https://alion.io/mcp/rest/get_company?id=2192384"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhumm-group-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhumm-group-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhumm-group-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/humm-group-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhumm-group-security-engineer"}]}