Senior Security Engineer

About the role

Foodies is seeking a Senior Security Engineer to join its high‑performing IT Operations team. You will own end‑to‑end security for a hybrid multi‑cloud environment, shaping strategy and ensuring the Co‑op’s systems stay resilient against evolving threats.

Key responsibilities

• Define and advance a Zero Trust security strategy, cloud security architecture, and threat‑informed defence.
• Drive continuous threat intelligence, vulnerability management and attack‑surface reduction using automation and AI‑enabled tools.
• Lead security incident response and conduct threat‑informed exercises to improve organisational readiness.
• Manage vendor and SaaS security requirements, including supply‑chain controls, SBOM validation and vendor assurance processes.
• Champion DevSecOps practices across secure CI/CD pipelines, container security, IaC validation and policy‑as‑code enforcement.
• Participate in an on‑call rotation to provide rapid security response when needed.

Required profile

• Detail‑driven security professional with a strong risk mindset.
• Proven hands‑on experience in enterprise security engineering within hybrid or multi‑cloud environments.
• Deep understanding of modern cyber‑security policies, technologies and best practices.

Required skills

• Zero Trust architecture
• Cloud security (multi‑cloud, hybrid)
• Identity governance
• API security
• SIEM, SOAR and EDR platforms
• Vulnerability management
• Automation and AI‑enabled tooling
• DevSecOps, secure CI/CD
• Container security
• Infrastructure‑as‑Code validation
• Policy‑as‑code enforcement
• Supply‑chain security, SBOM validation

What we offer

• Free car parking (including EV plugs)
• Southern Cross health insurance
• On‑site café with subsidised meals and a 5% retail discount
• Flexible working options and a day off on your birthday
• Long service leave
• In‑house learning and development programmes
• Flu vaccinations and social “Tribe” groups