Job Description
Senior Engineer - Security Strategy & Engineering
Job ID:  2353
Business Unit:  Cyber Security
Job Family:  Digital & Technology
Location:  Bendigo, VIC, AUS, 3550
| Melbourne, VIC, AUS, 3000
Employment Type:  Permanent
Employee Class:  Full Time

Closing date: Thursday 1 October 2026 
  
 
We
ve never been just a bank. Just like you should never be just an employee.Wereunited in our beliefthat inbanking, better can be bigger, and togetherweremaking it happen.  

 

It starts here. With Bendigo Bank… and you.  

 

About theopportunity   
 
The technology space is evolving, and so are we. At Bendigo Bank we are simplifying our technology function, creating clearer accountabilities aligned with our strategy and customer needs. With a focus on delivering innovative services at scale, we’re creating a future-ready customer experience and high performing culture.

As the Senior Engineer - Security Strategy & Engineering you will step into a pivotal SME role bridging the gap between high-level security architecture and hands-on technical execution. Supporting both our technical and advisory domains, you’ll consult directly with project teams, review and constructively challenge solution designs, and actively engineer and test security controls to keep our organisation and customers safe.

 

In this roleyoullget to 

  • Review complex solution architectures and designs across the bank, embedding robust, proactive security controls right from inception.
  • Serve as a trusted security SME who proves that the best advisory work is backed by hands-on technical expertise.
  • Conduct comprehensive threat modelling exercises utilising frameworks such as STRIDE, MITRE ATT&CK, and OWASP to uncover and remediate vulnerabilities early.
  • Build, configure, and validate technical security controls and testing regimes across application, network, and multi-cloud environments.
  • Play a foundational role in this newly created position, uplifting security maturity, advising diverse delivery squads, and driving modern security practices bank-wide.
  • Pivot seamlessly between architectural reviews, technical problem-solving, and stakeholder consulting in a collaborative, fast-paced environment.

 

Whatyoullbring to the role 

  • Proven track record applying methodologies like STRIDE, MITRE ATT&CK, and OWASP to assess and mitigate technical risk.
  • Strong experience in Security by Design, reviewing solution designs, and executing practical security testing.
  • Broad, confident technical knowledge spanning application, network, and cloud security disciplines.
  • Proven ability to partner with and advise technical and non-technical stakeholders effectively.
  • Demonstrated experience within the APRA-regulated financial services sector (or an equivalent highly regulated industry) is highly desirable.

 

This is apermanent, full-time opportunity,locatedat ourMelbourne or Bendigo Head Office locations.  

 

We offer flexible work options that put our people first, working in a hybrid model with a minimum local Head Office attendance requirementdeterminedby your Leader, to find a rhythm that works best for you and your team. We believe that coming into the office some of the time is the best way to learn, stay connected and collaborate effectively, especially for key activities like team days, 1:1s, and town halls.  

We believe a diverse workforce supported by an inclusive culture is central to our success and we actively encourage applications from those who bring diversity of thought to our business. We support candidate requests for adjustment to accommodate an illness, injury, or disability to equitablyparticipatein the selection process. 
  
If
you'realready part of Bendigo Bank (including Community Banks),you'llneed to apply through People Hub tosubmita valid application.Werekeen to support you with the next step in your career.  

 
 
Still in two minds?
  

Research suggests 60% of women and underrepresented groups might stop here, even after getting as far as drafting an application. We believe that diversity makes every team stronger, so even if youdonttick everyboxwe still want to see your application!  

 
Please note shortlisting and interviews may take place prior to the advertised close date, so
don'tdelayapply now!