DevSecOps Engineer

About HUB24

At HUB24, we’re rethinking the way wealth management works, combining platform, technology and data to create better outcomes for financial professionals and their clients.

Our purpose is simple: Empower better financial futures, together .

What sets us apart is how we work. We back bold thinking, move with pace, and turn ideas into action. You’ll have the opportunity to make a real impact across your team, the business, and for the clients we support every day.

HUB24 Limited is an ASX-listed company (ASX: HUB) and part of the ASX100. We have over 1,100 employees across Australia, with offices in Sydney, Melbourne, Brisbane, Perth and the Gold Coast.

Why you’ll enjoy working here

We create an environment where you can do your best work and see the impact of it.

• Work with smart, collaborative people who get things done.
• Your ideas won’t sit in a backlog, they’ll be heard, tested and actioned.
• Grow your career your way, with support to learn, stretch and explore new opportunities.

We also offer benefits to support you inside and outside of work

• Genuinely flexible and hybrid ways of working.
• Employee Share Scheme.
• Additional leave and wellbeing support.
• Enhanced parental leave and support through different life stages.
• Everyday benefits, including discounts and financial wellbeing support.

Why this is an exciting opportunity

We are seeking a DevSecOps Engineer to join our DevOps team and support the delivery of large-scale initiatives within a highly regulated financial services environment.

You will embed security-by-design across cloud infrastructure, CI/CD pipelines and API platforms, enabling secure, reliable and scalable delivery. Working closely with DevOps, Cyber Security, Platform Engineering and Architecture teams, you will help automate and monitor security controls aligned with HUB24 risk requirements. This role reports to the DevOps Manager and sits within Group Technology Services.

What you’ll be doing

• Embed security controls across the DevOps lifecycle from code through to production
• Design and implement secure CI/CD pipelines for applications and APIs
• Apply cloud security best practices, particularly within Google Cloud Platform (or equivalent)
• Implement and maintain API security, identity and access management controls
• Automate security testing and monitoring using industry-standard tools
• Support compliance, audit and risk assurance activities
• Act as a security advocate and provide guidance to engineering teams

• What you bring
• You don’t need to tick every box, but experience in the below will set you up for success.

Experience & Skills

• Strong experience with cloud platforms in regulated environments
• Proven experience integrating security into CI/CD pipelines
• Knowledge of cloud, application and API security
• Experience with IAM solutions such as Auth0, Entra ID or Okta
• Familiarity with financial services security standards and controls
• Strong scripting skills (Python, Bash)
• Pragmatic, automation-focused and security-first mindset

Our process

We aim to keep the process simple and respectful of your time

• You’ll receive an acknowledgement after applying.
• Our Talent team will review your application and keep you updated.
• If shortlisted, we’ll connect to learn more about you.
• Interviews may be virtual or in person.
• You’ll receive an outcome and feedback.

If you need any adjustments, please let us know - we’re here to support you.

Our commitment

We’re committed to building an inclusive environment where everyone feels valued and supported to do their best work. We welcome applications from people of all backgrounds, identities and experiences.

Agencies, we work with a panel of preferred suppliers and are not accepting any unsolicited CVs.