DevSecOps Engineer
HUB24 · Sydney
About HUB24
At HUB24, we’re rethinking the way wealth management works, combining platform, technology and data to create better outcomes for financial professionals and their clients.
Our purpose is simple: Empower better financial futures, together.
What sets us apart is how we work. We back bold thinking, move with pace, and turn ideas into action. You’ll have the opportunity to make a real impact across your team, the business, and for the clients we support every day.
HUB24 Limited is an ASX-listed company (ASX: HUB) and part of the ASX100. We have over 1,100 employees across Australia, with offices in Sydney, Melbourne, Brisbane, Perth and the Gold Coast.
Why you’ll enjoy working here
We create an environment where you can do your best work and see the impact of it.
- Work with smart, collaborative people who get things done.
- Your ideas won’t sit in a backlog, they’ll be heard, tested and actioned.
- Grow your career your way, with support to learn, stretch and explore new opportunities.
We also offer benefits to support you inside and outside of work:
- Genuinely flexible and hybrid ways of working.
- Employee Share Scheme.
- Additional leave and wellbeing support.
- Enhanced parental leave and support through different life stages.
- Everyday benefits, including discounts and financial wellbeing support.
Why this is an exciting opportunity
We are seeking a DevSecOps Engineer to join our DevOps team and support the delivery of large-scale initiatives within a highly regulated financial services environment.
You will embed security-by-design across cloud infrastructure, CI/CD pipelines and API platforms, enabling secure, reliable and scalable delivery. Working closely with DevOps, Cyber Security, Platform Engineering and Architecture teams, you will help automate and monitor security controls aligned with HUB24 risk requirements. This role reports to the DevOps Manager and sits within Group Technology Services.
What you’ll be doing
Embed security controls across the DevOps lifecycle from code through to production
Design and implement secure CI/CD pipelines for applications and APIs
Apply cloud security best practices, particularly within Google Cloud Platform (or equivalent)
Implement and maintain API security, identity and access management controls
Automate security testing and monitoring using industry-standard tools
Support compliance, audit and risk assurance activities
Act as a security advocate and provide guidance to engineering teams
What you bring
You don’t need to tick every box, but experience in the below will set you up for success.
Experience & Skills
Strong experience with cloud platforms in regulated environments
Proven experience integrating security into CI/CD pipelines
Knowledge of cloud, application and API security
Experience with IAM solutions such as Auth0, Entra ID or Okta
Familiarity with financial services security standards and controls
Strong scripting skills (Python, Bash)
Pragmatic, automation-focused and security-first mindset
Our process
We aim to keep the process simple and respectful of your time:
- You’ll receive an acknowledgement after applying.
- Our Talent team will review your application and keep you updated.
- If shortlisted, we’ll connect to learn more about you.
- Interviews may be virtual or in person.
- You’ll receive an outcome and feedback.
If you need any adjustments, please let us know - we’re here to support you.
Our commitment
We’re committed to building an inclusive environment where everyone feels valued and supported to do their best work. We welcome applications from people of all backgrounds, identities and experiences.
Agencies, we work with a panel of preferred suppliers and are not accepting any unsolicited CVs.