Security Engineer

About the role

Our Mission

iSeatz drives enduring brand loyalty through exceptional, connected experiences. Our digital commerce and technology solutions enable travel and lifestyle bookings for the world’s leading brands in financial services, travel, and hospitality, including American Express, IHG Hotels & Resorts, Qantas, and more.

What We Do

We have a history of long-term trusted relationships and innovation that drives tangible value to our customers through a customizable, scalable, and secure platform, a global third-party marketplace, and loyalty integration. Our proprietary platform processes over $9B per year in transactions.

We aspire to put our customers at the heart of every decision and exceed their expectations with best-in-class solutions and business-value innovations.

What You’ll Do

The Security Engineer reports to the Information Security Manager and works closely with Security, DevOps, Engineering, IT, and Compliance teams to design, build, operate, and continuously improve the technical controls that protect iSeatz systems, applications, and data. This is a hands-on engineering role focused on secure AWS environments, automation, detection and response capabilities, and practical risk reduction across a cloud-native platform.

In this role, you will translate security requirements into durable technical solutions, help engineering teams ship securely, and improve the visibility and resilience of the services our customers depend on.

Your Impact

- Engineer and maintain security controls across AWS accounts and services, including identity, logging, monitoring, network security, encryption, and configuration assurance.

- Develop, review, and improve Infrastructure as Code for security controls and cloud infrastructure. Work within existing IaC workflows and help make secure patterns repeatable for engineering teams.

- Operate and improve the SIEM, including log source onboarding, detection content, alert tuning, investigation support, dashboards, and use cases aligned to real threats and business risk.

- Administer and strengthen identity and access management controls across the identity provider, cloud environments, and critical SaaS platforms, including SSO, MFA, lifecycle automation, privileged access, and access reviews.

- Maintain and enhance intrusion detection and prevention capabilities across cloud, endpoint, and network environments. Investigate meaningful detections and partner on containment and remediation.

- Own key portions of the vulnerability management lifecycle: asset coverage, scanning, validation, prioritization, remediation tracking, exception support, and executive or technical reporting.

- Partner with Engineering and DevOps to secure CI/CD pipelines, application dependencies, secrets, container images, Kubernetes or ECS workloads, and runtime environments.

- Build security automation, integrations, and tooling using scripting and APIs to reduce manual effort, improve evidence quality, and increase response speed.