Senior Security Engineer - Product Security

About Us

Zepto is building the beating heart of Australia's real-time, account-to-account payments revolution.

We're a rapidly-scaling business reimagining how money moves for some of Australia's largest merchants, organisations and payment platforms - disrupting a market that's been overdue for change for decades. This ambition has seen us recognised as FinTech Organisation of the Year at the Finnies Awards. Twice.

For passionate, action-oriented people, this ambition means genuine opportunity: to build category-defining infrastructure, own hard problems, and grow a career at the pace of the business around you. This isn't incremental work - it's the kind of experience that changes the trajectory of a career.

We believe in the power of positive human experiences, and that a deep sense of belonging creates cohesion in our culture. Even as a remote-first team, you'll be a contributor and custodian of that culture, solving complex problems alongside talented people who are just as driven to help us deliver on our brand promise and build 'a better way to pay' at Zepto.

About the Role

As a Senior Security Engineer (Product Security), you will play a significant role in keeping our product safe and secure by building on and maturing Zepto's product security practices. You will work hands-on and shoulder-to-shoulder with Engineering and Product teams, providing guidance and coaching across the software development life cycle while continuing to raise the bar on our security expectations and capability.

This is a security role at its core, but not a gatekeeping one. We are builders - we expect you to read and write production-level code, build tooling and automation, and contribute paved-road solutions that engineers actually want to use.

Reporting to the Security Engineering Lead, you will work closely with them to develop and build Zepto's product security strategy and approach. You will apply a consultative and advisory approach when working with the wider Zepto team, empowering them to work confidently and to use the self-service capabilities you help establish.

We have excellent working relationships with our developers and we need to keep it that way. We are not the team of no. We are the team that helps make things better.

Zepto is moving quickly towards an AI-native way of building and operating. You will be someone who is already experimenting with AI and agentic tooling, or is genuinely keen to, and who is open to developing the skills to secure these systems as we adopt them.

Within the Security team, you are the go-to person for:

• Secure development practices
• Vulnerability management
• Security architecture advice

Working in a scale-up, means you get the opportunity to flex your skills in a variety of ways. We are agile and always willing to roll up our sleeves to get things done. You can, however, expect your day to day to be involved in the following:

• Coach engineering teams and collaborate to ensure every step of the software development life cycle follows security best practices
• Design, build and maintain security tooling, automation and paved-road controls as production-quality software
• Conduct security assessments and architecture reviews of Zepto's applications and services
• Embed within project teams to ensure they are effectively considering information security risk and prioritising security controls
• Establish and document security architecture and practices in collaboration with the Security Engineering Lead, Product and Engineering teams
• Work with the Security Engineering Lead to support Zepto's adoption of AI and agentic systems, and experiment with AI tooling to improve how the Security team works
• Help manage application security incidents in collaboration with the rest of the Security team

About You

You’re a generalist Security Engineer with diverse experience that knows how to get things done. You have proven knowledge of security best practices and how to implement them in a scale-up environment.

Specifically, we’d welcome any candidate who has the following experience:

• The ability to read and write production code and build tooling and automation, with a software engineering foundation (Go and/or Python preferred, but engineers in any language will be considered)
• Experience implementing and maintaining common application security tooling
• Hands-on experience automating security controls
• Experience working in cloud infrastructure (AWS)
• Proven experience advising engineering teams on security architecture best practices
• Actively experimenting with, or a demonstrated appetite to experiment with, AI and agentic technologies, and an interest in securing them
• A strong and empathic communicator with both technical and non-technical teams

While Zepto is a remote-first organisation with a national footprint, our preference is for this role to be based in Melbourne, Sydney or Brisbane. We’re looking for Zeptonians who hold long-term, permanent status in Australia-specifically Australian Citizens or Permanent Residents. While we’d love to welcome everyone, we aren't equipped to offer visa sponsorship or consider temporary work visas for this role right now.

Regardless of where you are located in Australia, you’ll enjoy the flexibility of our remote-first model and be supported by great leadership to learn and grow, with the added benefit of our co-working hubs for those who value a hybrid environment or for that social connection.

Why Zepto?

Headquartered in beautiful Byron Bay, Zepto has an inspiring founder story and is a customer-focused, culture-first organisation. You’ll be joining a team that champions curiosity and a pioneering perspective, and thrives in a fast-moving sector.

Just some of Zepto’s commitments to it’s people include:

• Join a Talented Team:Work with world-class talent and leaders who support career growth
• Flexible Work:A remote-first work culture, with the opportunity to work anywhere in Australia. You’ll also get access to premium co-working spaces and a Byron, Sydney & Melbourne Hub
• Paid Parental Leave:12 weeks Paid Parental Leave for primary caregivers and 4 weeks for secondary caregivers
• Wellbeing Focus: Access to Zepto’s Wellbeing Menu, which includes 3 x paid Wellbeing Days per year and access to an Employee Assistance Program
• Annual Learning Budget:An individual learning budget, and 4 x paid Growth & Impact Days annually to focus on professional development
• Remote-Work Support:A $500 Remote Work Budget to set up your home office upon commencement, and $300 annually from your 2nd Zeptoversary

Please note:As an organisation in the financial services industry, we conduct background checks as part of our recruitment process.