Senior Security Engineer Endpoint

Employment Type

Closing Date

Job Title

Job Summary

Job Description

Who We Are

We're an iconic Aussie brand with a global footprint. Our purpose is to build a connected future so everyone can thrive. We're all about providing the best experience and delivering the best tech on the best network.

This includes making Telstra the place you want to work. For you, that means a having career that grows with you and working with a team powered by human connection that prioritises wellbeing and choice.

What We Offer

Performance-related pay

Access to thousands of learning programs so you can level-up

Global presence across 22 countries; opportunities to work where we do business.

Purchased annual leave scheme

Additional Telstra day off

Additional 30% off Telstra products and services

Toolkit provided (laptop + mobile phone + plan paid for)

What You’ll Do

Global Networks & Technology - Security & Operations is responsible for Telstra's security and operations, protecting Telstra's assets and infrastructure.

The role works directly on production security infrastructure, embedding controls into live systems, integrating with applications and APIs, and responding to incidents as they occur. A significant focus of the role is securing APIs used across the Telstra Group.

Key Responsibilities

• Implement and operate security controls protecting applications, services, and APIs.

• Design and integrate API security solutions into existing enterprise environments, including API gateways, cloud platforms, and hybrid infrastructure.

• Secure live APIs and service integrations in collaboration with API owners.

• Participate in on-call rotations supporting critical security infrastructure.

• Respond to security incidents including investigation, remediation, and recovery.

• Automate operational tasks to improve reliability and reduce manual effort.

• Work directly with engineering teams and vendors to resolve issues and deliver fixes.

• Engage with API owners, engineering teams, and platform teams across Telstra to embed secure by design practices.

• Provide subject matter expertise and guidance on API security to business and technical stakeholders.

• Identify security risks and issues and recommend mitigation strategies.

• Contribute to continuous improvement of security capabilities, standards, and patterns.

About You

Key Skills & Experience

• Proven experience in security engineering, with a strong focus on API security.

• Strong understanding of RESTful APIs and API security concepts (e.g. OAuth 2.0, OpenID Connect, JWT, authentication and authorisation).

• Strong understanding of networking and traffic flows

• Experience operating security controls in cloud or hybrid environments

• Ability to respond to incidents and manage issues through to resolution

• Strong stakeholder engagement skills with the ability to communicate technical concepts clearly.

Qualifications

Essential

• Bachelor’s degree in Engineering, Computer Science, Information Technology, or equivalent practical experience.

• 5 + years engineering API Gateways or API Security

Desirable

• Relevant cyber security certification (e.g. CISSP, Security+, or equivalent).