Senior Security Engineer - Product Security

About Us

Zepto is building the beating heart of Australia's real-time, account-to-account payments revolution.

We're a rapidly-scaling business reimagining how money moves for some of Australia's largest merchants, organisations and payment platforms – disrupting a market that's been overdue for change for decades. This ambition has seen us recognised as FinTech Organisation of the Year at the Finnies Awards. Twice.

For passionate, action-oriented people, this ambition means genuine opportunity: to build category-defining infrastructure, own hard problems, and grow a career at the pace of the business around you. This isn't incremental work – it's the kind of experience that changes the trajectory of a career.

We believe in the power of positive human experiences, and that a deep sense of belonging creates cohesion in our culture. Even as a remote-first team, you'll be a contributor and custodian of that culture, solving complex problems alongside talented people who are just as driven to help us deliver on our brand promise and build 'a better way to pay' at Zepto .
About the Role

As a Senior Security Engineer (Product Security), you will play a significant role in keeping our product safe and secure by building on and maturing Zepto 's product security practices. You will work hands-on and shoulder-to-shoulder with Engineering and Product teams, providing guidance and coaching across the software development life cycle while continuing to raise the bar on our security expectations and capability.

This is a security role at its core, but not a gatekeeping one. We are builders – we expect you to read and write production-level code, build tooling and automation, and contribute paved-road solutions that engineers actually want to use.

Reporting to the Security Engineering Lead, you will work closely with them to develop and build Zepto 's product security strategy and approach. You will apply a consultative and advisory approach when working with the wider Zepto team, empowering them to work confidently and to use the self-service capabilities you help establish.

We have excellent working relationships with our developers and we need to keep it that way. We are not the team of no. We are the team that helps make things better.

Zepto is moving quickly towards an AI-native way of building and operating. You will be someone who is already experimenting with AI and agentic tooling, or is genuinely keen to, and who is open to developing the skills to secure these systems as we adopt them.

Within the Security team, you are the go-to person for:

- Secure development practices

- Vulnerability management

- Security architecture advice

Working in a scale-up, means you get the opportunity to flex your skills in a variety of ways. We are agile and always willing to roll up our sleeves to get things done. You can, however, expect your day to day to be involved in the following:

- Coach engineering teams and collaborate to ensure every step of the software development life cycle follows security best practices

- Design, build and maintain security tooling, automation and paved-road controls as production-quality software

- Conduct security assessments and architecture reviews of Zepto 's applications and services

- Embed within project teams to ensure they are effectively considering information security risk and prioritising security controls

- Establish and document security architecture and practices in collaboration with the Security Engineering Lead, Product and Engineering teams

- Work with the Security Engineering Lead to support Zepto 's adoption of AI and agentic systems, and experiment with AI tooling to improve how the Security team works

- Help manage application security incidents in collaboration with the rest of the Security team

About You

You’re a generalist Security Engineer with diverse experience that knows how to get things done. You have proven knowledge of security best practices and how to im