Senior Cloud Security Engineer

We Dream. We Design. We Deliver.

Join hummgroup, one of Australasia’s most successful and enduring non-bank financial services institutions. We specialise in fast, easy finance with a market-leading range of business asset finance, credit cards and point of sale payment plan solutions designed around the core needs of today’s businesses and retail consumers. Come join our team and be a part of our next chapter of innovation and growth.

What's so exciting about this role?

This is a high-impact role where you’ll help shape and strengthen cloud and application security across AWS and Azure. Working closely with engineering, infrastructure, SRE, and security teams, you’ll embed security by design, drive Zero Trust initiatives, and proactively manage risk. It’s a hands-on opportunity to influence DevSecOps practices, support incident response, and play a key role in advancing the organisation’s overall cyber resilience.

What Does An Average Day Look Like?

No day is average at humm but here’s an idea of what you can expect to do in this role:

• Partner with engineering, product, and infrastructure teams to embed security by design and drive continuous cybersecurity improvements
• Proactively identify, assess, and remediate security risks across cloud, applications and platforms
• Support incident response, root cause analysis, and preventative measures to strengthen cyber resilience
• Implement and monitor security controls, tools, and platforms to ensure effective protection and reporting of security posture
• Contribute to cybersecurity strategy and roadmap, including cloud security posture and exposure management, vendor risk management, emerging technology reviews (e.g. AI), and capability uplift across teams

Who will thrive in this role?

You’re a hands-on Senior Security Engineer with a strong background in AWS security, DevSecOps, and incident response, and a passion for strengthening security across modern cloud environments.

We’re also looking for someone who brings:

• Strong hands-on expertise in AWS security (essential) across services like IAM, KMS, CloudTrail, GuardDuty, WAF, and Security Hub, with some exposure to Azure (e.g. Entra ID, PIM)
• Solid grounding in cloud, application, and data security principles, with the ability to apply them in modern, distributed environments
• Experience working with infrastructure-as-code and containerised environments (e.g. Terraform, Ansible, Kubernetes)
• Familiarity with DevSecOps practices, including embedding security into CI/CD pipelines (SAST, DAST, SCA)
• Skilled in using security tooling such as SIEM, XDR, CSPM, and threat exposure management platforms
• Experience with Zero Trust initiatives, with financial services or regulated industry exposure highly regarded
• Experience with PCI DSS compliance and security frameworks such as ISO 27001, NIST CSF

Working at hummgroup

We embrace flexible working arrangements, ensuring a genuine work-life balance and a fun, vibrant inclusive culture that embraces diverse perspectives and values the unique contributions of each of our team through our behaviours Leadership - Accountability - Collaboration - Commerciality. 

We invite candidates of all gender expressions, ethnicities, ages, and other culturally diverse groups to apply.  We are committed to making reasonable adjustments to provide a positive, barrier-free recruitment process and welcoming and supportive environment where all our people can thrive.

If this sounds like the opportunity, you have been looking for then apply today!