{"id":1532131,"url":"https://alion.io/job/rest-api-platform-engineer-12-month-fixed-term-contract","title":"API & Platform Engineer - 12 Month Fixed Term Contract","company":{"id":695623,"name":"Rest","domain":"rest.com.au","url":"https://alion.io/company/rest-5","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"DevOps","role_family":"DevOps","seniority":null,"employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Node JS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"TypeScript","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-09-30T00:42:36Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-09-30T16:43:33Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"We’ve been around since 1988, and today we’re one of Australia’s largest profit-to-member super funds.\nThat means everything we do is focused on delivering better outcomes for our members - not shareholders.\nClosing date: 14 October 2026\nPlease note Rest does not accept speculative resumes from recruitment agencies\nRest will review applications prior to the closing date and may close the role earlier \n Help protect technology that supports the financial wellbeing of millions of Australians.\n\nTake ownership of high-impact application, API and platform security remediation across a modern technology environment.\n\nSydney CBD Office Located, Hybrid Working\n\nAt Rest, we help more than 2 million Australians to build a better financial future. With around $112 billion in funds under management, we focus on delivering strong long-term outcomes for our members - from their first job through to retirement*. Your best at Rest means focusing on what matters, being trusted to get on with it, and knowing your work genuinely makes a difference. That’s how we operate every day, guided by our values: Be Daring, Keep It Simple, Take Action and Have Grit.\nJoin us as a API & Platform Engineer on a 12 Month Fixed Term Contract.\nIn this role you will own and perform risk-prioritised remediation of application code, dependency and repository security findings across API and platform engineering. Strengthen GitHub and CI/CD practices so vulnerabilities are effectively closed and recurring risks are reduced through secure controls, guardrails and engineering patterns.\nAccountabilities/Responsibilities\nOwn and perform hands-on remediation of prioritised application code findings identified through SAST, DAST and other security tooling, and verify effective closure.\nRemediate vulnerable open-source and third-party dependencies identified through SCA, including upgrades, replacement or removal, with evidence that the risk has been resolved.\nStrengthen repository security by addressing exposed secrets, insecure configuration, excessive access, missing branch and pull-request protections, and unsafe workflow settings.\nPartner with platform, application and product teams where remediation depends on service ownership, coordinating action and validating closure.\nImprove GitHub and CI/CD security through secure repository baselines, reusable workflows, automated SAST, DAST and SCA integration, secrets protection, dependency controls and quality gates.\nIdentify recurring weaknesses and document practical controls, guardrails, secure engineering patterns, remediation standards, playbooks and governance evidence.\nLead platform and application security risk exemptions by assessing residual risk, documenting business justification and compensating controls, coordinating approvals, and monitoring review and expiry\n Experience, skills and qualifications\nHands-on experience implementing security fixes across modern application and API codebases, with strong development and scripting capability in Node.js, TypeScript and Python.\nStrong understanding of SAST, DAST and SCA findings, including practical remediation of vulnerable code, open-source dependencies and third-party packages.\nPractical GitHub administration and security experience covering repository governance, access controls, branch protection, pull-request requirements, GitHub Actions and secrets management.\nExperience with cloud-native platforms, APIs, containers, serverless services and infrastructure as code.\nKnowledge of the OWASP Top 10, common CWEs, secure code remediation and software supply-chain security.\nCI/CD security engineering experience, including automated security testing, reusable GitHub Actions workflows, quality gates, vulnerability management integration and validation of remediation outcomes.\nAbility to translate security findings into clear, practical remediation requirements for engineers, platform owners and product teams.\n .What you'll find at Rest\nHybrid working\n5 Rest Days (wellbeing days) each year in addition to annual leave\nEligible employees are entitled to 22 weeks paid parental leave (gender neutral)\nContinued super contributions during parental leave\nLearning and development opportunities, including AI & Data Academy, leadership programs, LinkedIn Learning, study assistance and professional memberships\nIncome Protection Insurance\nOption to purchase additional leave\nRecognition through our Rest Excellence Awards\nIf you share our values and this sounds like the kind of place you’d do your best work, we’d like to hear from you. Apply now.\nRest is committed to creating a flexible work environment and culture that embraces diversity, equity, and inclusion - where people feel welcome, safe to be themselves and inspired to do their best.\nWe value the different backgrounds, lived experiences and abilities our diverse team brings. We welcome and encourage applications from candidates of all ages, cultural backgrounds, faiths, gender identities, sexual orientations and thinking styles. This includes people with disability, neurodiverse individuals, Aboriginal & Torres Strait Islander peoples and those with disrupted work history due to career or other breaks.\nWe welcome applications from all candidates. To be considered, you will need the right to work in Australia.\n*Funds under management as at 30 June 2026. Rest is recognised as a superannuation leader across a range of areas including performance, responsible investment and member value. Find out more at https://rest.com.au/why-rest/awards.","description_format":"text","description_chars":5540,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Equity","Flexible schedule","Hybrid work","Parental leave"],"hiring_locations":[{"name":"Australia","iso":"AU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-30T16:43:33Z"}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.897,"p_room":1,"age_days":1,"expected_fill_days":6,"reasons":["conf:13","velocity","win:early"],"computed_at":"2026-10-01T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/rest-api-platform-engineer-12-month-fixed-term-contract","json_url":"https://alion.io/job/rest-api-platform-engineer-12-month-fixed-term-contract.json","meta":{"generated_at":"2026-10-02T02:36:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":3525,"day_limit":5000,"remaining_today":1475,"minute_limit":60,"resets_at":"2026-10-03T00:00:00Z"}}}