Senior Security Engineer - Platform Standards

Senior Security Engineer, Platform Standards

RFC-0042: Enforcement Standards, v3 Status: OPEN FOR COMMENT Reviewer (Governance Forum): "This changes DLP behaviour for every laptop and every inbox in the company. Who owns this?" Author: "I do."

The honest version of this ad

Most "senior platform engineer" ads are actually admin roles wearing a nicer job title. This one isn't. Somewhere inside a large, regulated organisation, someone needs to own the standard that every proxy rule, every endpoint build, and every email control gets held to, and be the one who can defend that standard in a room full of people who outrank them. That's this role.

What you'd actually be doing

• Setting the bar, not applying it: owning configuration standards across web filtering, endpoint protection and email security that delivery teams then build to

• Translating governance into engineering: sitting in the platform governance forum and turning committee decisions into change specs and config that actually ships

• Making data protection real at the control layer: defining how sensitivity labels actually become enforcement at the proxy and email layer, not just a policy document

• Owning the device estate end to end: the full MDM/MAM framework across Windows, Mac, iOS and Android, compliance baselines and all

• Writing the paper trail that survives an audit: runbooks and configuration standards that hold up when a regulator, not just a colleague, comes asking

What you'd bring

• 5+ years of genuine ownership, not just exposure, across gateway, endpoint and email security platforms

• Deep proxy chops: URL filtering, SSL inspection, CASB, and DLP enforcement at the proxy layer specifically

• Direct experience owning EDR standards on Windows and macOS, plus MDM/MAM and DMARC across a multi-domain estate

• The stomach to sit at a governance table and hold a technical line under pressure, in plain language execs and engineers both understand

• Ideally, prior time in a regulated or SOCI-obligated environment, where "audit-ready" isn't a nice-to-have

What you won't be doing

Ticket-driven platform admin. This is a standard-setting seat, and the people implementing your standard report somewhere else.

The practical bit

Permanent role. Open to Sydney, Melbourne, Brisbane or Adelaide, hybrid working. If you've ever wanted to be the "I do" in that RFC thread, this is the role.