Staff Security Engineer

Join to apply for the Staff Security Engineer role at x15ventures.

We're a venture-scaler powered by CommBank. That means we build, buy, and invest in startups that could benefit the bank's 15 million customers and beyond. We're neither corporate nor startup; we navigate the space between both worlds, with the bank's strategy, scale, and stability, but with autonomy to try new things.

What it's like to work here: we're a community of galvanisers, thinkers, and doers with a big, bold vision. We never lose sight of the impact we can have on people's lives and celebrate growth. We guided by three values: Care, courage, and commitment, acting to help our people and customers, and always finding a way.

Where do you fit? As a Staff Security Engineer, you'll be a technical authority across cyber, fraud, and scams security. You'll partner with venture teams, guide security strategy, and lead by doing — from threat hunting to building automation into SOC playbooks and embedding security frameworks across the ventures.

In this role you will: you'll shape how we detect, respond and assure security across multiple ventures while helping scale our security function in a lean, startup-friendly way.

• Fraud and Scams Defence – Develop and uplift fraud and scams prevention controls across ventures.
• Security Assurance – Build lightweight, effective security assurance programs aligned to NIST CSF and ACSC Essential 8.
• SOC & Threat Hunting – Lead purple team exercises, hunt threats using Microsoft Sentinel and the Defender Suite.
• Automation First – Design and implement automated playbooks, reduce repetitive SOC tasks, and improve detection efficiency.
• Architecture & Consultation – Partner with engineers and executives to embed secure design and provide pragmatic security consultation.
• Mentorship – Coach security engineers, share threat-hunting techniques, and uplift team capability.
• Reliability Mindset – Apply site reliability engineering practices to build resilient, observable, and scalable security systems.
• Continuous improvement – Uplift maturity across ventures, lead security assessments and contribute to cross-venture threat models.

• Proven experience in cyber security, fraud and scams prevention.
• Hands-on expertise in Microsoft Sentinel and Defender XDR suite, with real-world threat hunting experience.
• Strong SOC background: incident response, detection engineering, threat hunting.
• Track record of mentoring engineers and building team-wide technical capability.
• Passion for automation-first security operations (SOAR, scripted playbooks, automated remediation).
• Knowledge of NIST frameworks, Essential 8 maturity and threat assessments.
• Strong purple teaming mindset – you can think like an attacker, defend like a blue-teamer, and design like an architect.
• Excellent communication skills: able to consult with product teams risk leaders and executives in plain language.

• Familiarity with site reliability engineering principles applied to security.
• Experience running or contributing to security assurance programs (e.g. audits, control testing, RCSA).
• Background in fraud detection platforms or scam-prevention tooling.
• Exposure to cloud-native zero trust environments (Azure, AWS, SaaS-heavy).
• Experience working in startup or scale-up environments balancing pragmatism with control maturity.
• Industry contribution (publications, conference talks, regulator/industry working groups).

• Enjoy a flexible and dynamic startup environment
• We nurture a safe space for our people to show up as they are
• Competitive salary and bonus structure
• Opportunities for professional growth and development
• Access to the best in class benefits that CommBank offers.

Research shows that people from underrepresented backgrounds sometimes hesitate to apply for roles if they don't meet every requirement. We still encourage you to apply. We are committed to creating a workplace that supports long-lasting and meaningful careers for everyone, and your unique skills and perspective might be just what we're looking for