Enterprise Security Engineer

The Enterprise Security Engineer is a hands-on engineer who implements, operates, and improves security controls across corporate architecture, SaaS platforms, cloud services, endpoints, identity, data, and workforce technologies. This role translates enterprise security strategy into practical, measurable controls and secure-by-default solutions that reduce risk without slowing the business. The engineer partners with Enterprise IT, Corporate Engineering, SRE and Platform teams, Business Systems, Product Security, Legal, Privacy, and other stakeholders to deliver scalable security improvements across Atlassian's corporate environment. As part of Atlassian's "Customer Zero" initiative, the engineer helps validate and improve security capabilities internally before broader adoption. This role is based in our Australia/New Zealand entities. Enterprise Security Engineering Design, implement, operate, and maintain security controls across identity, endpoints, network, cloud (AWS/GCP), SaaS, and data-protection domains. Remediate identified gaps in access controls, device posture, SaaS configurations, and sensitive data protections. Assist with the rollout and adoption of secure baseline configurations and paved-path implementations across internal teams. Participate in security reviews for new tools, internal workflows, and SaaS integrations under the guidance of senior engineers. Support cyber-related physical security operations, including maintaining integrations between physical access-control systems and identity platforms, monitoring access lifecycles, and addressing facility-related cyber risks. Identity, Access & Human Risk Strengthen identity lifecycle management, privileged access, authentication, authorisation, and access reviews. Help validate agentic identity, AI-native governance, data-protection, and access controls internally before broader release. Monitor insider risk signals, anomalous access patterns, and policy violations to support triage and response. Support the secure implementation of service accounts and automated bot credentials. Cloud, SaaS & Endpoint Protection Implement and monitor security guardrails and posture baselines across cloud environments (AWS/GCP) and SaaS suites (Google Workspace, Slack, Okta). Maintain endpoint security agents, device compliance policies, and configuration baselines across macOS and Windows fleets. Help implement and tune Data Loss Prevention (DLP) and data-classification controls to safeguard internal and customer information. Automation & Operational Excellence Build scripts, API integrations, and automations (e.g., Python, Bash, Go) to eliminate repetitive tasks and streamline security operations. Maintain infrastructure-as-code and CI/CD security checks for enterprise tooling. Track operational metrics, monitor control health, and contribute to standard operating procedures (SOPs) and runbooks. Participate in on-call rotations, troubleshooting, and post-incident reviews (PIRs) for security tooling outages, pipeline failures, and platform availability issues. SaaS Supply Chain & Third-Party Risk Execute security evaluations and vendor risk reviews for new SaaS tooling and browser extensions against defined security criteria. Track remediation of identified vendor vulnerabilities and configuration risks. How You'll Measure Success Execution and Delivery: Successfully deliver scoped technical tasks, control deployments, and automation milestones on time with high code and configuration quality. Operational Excellence: Triage and resolve security escalations, access tickets, and alert queues within established SLOs, actively reducing backlog and manual toil. Automation and Tooling: Write reliable scripts and workflow automations that reduce manual operational effort and improve control reliability. Security Hygiene & Remediation: Close identified posture gaps across SaaS, endpoints, or IAM systems, demonstrating measurable improvements in baseline compliance. Collaborati