Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 3 days ago

Platform Security Engineer

Nintex21 open roles

Where
Melbourne, Australia
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPlatform Security EngineerNintex · Melbourne, Australia

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Nintex's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.3% of postings close within 7 days. Measured by our own scanner across the market. Nintex postings stay open a median of 49 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.6%3 days
  3. 13.3%7 days
  4. 21.3%14 days
  5. 35.7%30 days
  6. 59.1%60 days
This job: posted 3 days ago

Nintex median: 49 days open

The posting

About Nintex:

At Nintex, we are transforming the way people work, everywhere.

As the global standard for process intelligence and automation, we're trusted by over 10,000 public and private sector organizations across 90 countries. Our customers, from industry giants like Amazon, Coca-Cola, and Microsoft, rely on the Nintex Platform to accelerate their digital transformation journeys by managing, automating, and optimizing business processes quickly and efficiently. We improve their lives through the technology we build.

We are committed to fostering a workplace that supports amazing people in doing their very best work every day. Collaboration is constant, our workplace is fun, the environment is fast-paced, and we value our people’s curiosity, ideas, and enthusiasm. Driven by passion and accountability, we take initiative, measure progress, and deliver results. Our culture fosters innovation and problem-solving, fueled by curiosity and a commitment to thinking big. Together, we move with agility, prioritize customer needs, and build unity through empathy, leaving a positive impact wherever we go.

Working in engineering:

Working at Nintex as an engineer means building more than just software; it’s about making a tangible impact with every line of code. Our engineers are process experts, developing the industry’s most complete process and automation platform to transform the way people work. If you’re interested, curious and want to learn and do more, the sky is the limit here. We take a solutions-oriented and collaborative approach, constantly innovating our business and products.

About the role:

As a Platform Security Engineer, you are a developing security professional building expertise in securing cloud-native infrastructure, container platforms, CI/CD pipelines, and product services within the Platform Engineering organization. You take ownership of moderately complex security tasks with increasing autonomy while receiving guidance on architectural decisions and strategic direction. You implement and maintain security controls, build standardized security processes for engineering teams (vulnerability management, production security checks, secure build pipelines), support penetration testing and SOC operations for the product environment, contribute to compliance-related activities from the product security perspective, and help embed security practices into the developer experience through tooling and documentation. You are building depth and maturity in infrastructure security, application security, and shift-left practices needed to progress toward a senior platform security role.

Your contribution will be:

  • You conduct vulnerability assessments of platform and product infrastructure components, coordinating remediation with SRE, Platform Engineering, and product service teams.
  • You maintain a vulnerability tracking system and produce regular reporting on security posture, remediation velocity, and risk trends for engineering leadership.
  • You implement and maintain security gates in CI/CD pipelines including dependency scanning, static application security testing (SAST), software composition analysis (SCA), and container image scanning.
  • You review code and other security remediations and provide development teams with security guidance.
  • You implement and maintain security controls across the platform, including container orchestration security policies, network segmentation, role-based access controls, and admission control mechanisms.
  • You manage container image scanning and enforce image policies in CI/CD pipelines and cluster admission, ensuring only vetted and signed images reach production environments.
  • You support infrastructure-as-code security scanning using policy-as-code tooling, flagging and remediating misconfigurations in infrastructure definitions before they reach production.
  • You maintain and improve secrets management workflows, ensuring rotation policies are enforced, access is audited, and no secrets are hardcoded or exposed in source code or configuration.
  • You support cloud security posture management across cloud environments, monitoring for drift, misconfiguration, and compliance deviations against established baselines.
  • You support service mesh security configuration including mutual TLS enforcement, authorization policies, and traffic policies that enforce zero-trust communication between platform services.
  • You contribute to tenant isolation and access control configuration for shared platform services, ensuring appropriate segmentation between teams and environments.
  • You participate in security incident response for platform and product-related events, supporting investigation, containment, evidence preservation, and documentation under guidance from the Senior Platform Security Engineer.
  • You support compliance-related activities from the product security perspective, providing evidence, documentation, and technical validation for audits and assessments (SOC 2, ISO 27001, CIS Benchmarks) without owning the compliance program itself.
  • Vulnerability report generation, security posture dashboards, and remediation workflow tooling.
  • You contribute to security reviews for infrastructure and product changes, providing feedback on pull requests and architecture proposals from a security perspective.
  • You explain security concepts and requirements to engineering teams, empowering them to build securely and understand the rationale behind security controls.

To be successful, we think you need:

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related field; or equivalent combination of education and experience.
  • 2+ years of professional experience in security engineering, infrastructure security, DevSecOps, application security, or related field.
  • Hands-on experience with at least one major cloud platform (Azure or AWS).
  • Working knowledge of container orchestration security concepts in Kubernetes: pod security, role-based access control, network policies, admission controllers.
  • Experience with infrastructure-as-code tools and understanding of how to secure IaC workflows.
  • Understanding of CI/CD pipeline security: dependency scanning, SAST/SCA integration, artifact integrity.
  • Understanding of security frameworks and compliance standards (SOC 2, ISO 27001, CIS Benchmarks, OWASP).
  • Proficiency in scripting (Python, Bash, Go, or PowerShell) for security automation and tooling.
  • Proficiency with programing languages ( C#, Javascript/Typescript).
  • Experience with or exposure to penetration testing, vulnerability management workflows, and security incident response.
  • Strong communication skills with the ability to explain security findings and build standardized processes that engineering teams adopt. GitHub and/or Azure DevOps pipelines.
  • Valued certifications: Security+, CEH, GIAC GWAPT, BSCP etc.

What’s in it for you?

Nintex has a hybrid working model, enabling us to build culture, learn, and grow together. We intentionally connect and collaborate, while emphasizing flexibility with a blend of at-home and in-office work. This role is a hybrid role in our local Nintex office.

While our offerings differ from country to country, we offer our entire global workforce an array of exciting perks and benefits, including

  • Global Gratitude and Recharge Days
  • Flexible, paid time off policy
  • Employee wellness programs and counseling resources
  • Meaningful peer recognition and awards
  • Paid parental leave
  • Invention/patenting assistance
  • Community impact, paid volunteer time, and opportunities
  • Intercultural learning and celebration
  • Multiple tools through which to learn and grow, and an incredible global community

View more about our benefits here: https://www.nintex.com/wp-content/uploads/2023/01/Global-Perks-and-Benefits.pdf.

We are a 2023 Circle Back Initiative Employer – we commit to respond to every applicant.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Nintex's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Nintex's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Nintex's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.