Latest AI JobsBrowse Jobs
Dovetail logo

Security Engineering Lead

DovetailSydneyEngineering
Apply on company site
Salary
Not listed
Job type
Full-time
Work mode
Remote
Posted
24 Aug 2026
Status
Open · checked 7d ago

About this role

Dovetail is seeking a Security Engineering Lead to join its engineering team in Sydney for a full-time, in-person first role that suits a pragmatic security professional eager to blend governance with hands-on technical automation. This individual contributor position sits at the intersection of risk management, compliance, and cloud security at a rapidly growing customer intelligence platform.

Role Overview

The Security Engineering Lead at Dovetail owns the governance, risk, and compliance function, driving certifications like SOC 2, ISO/IEC 27001, and ISO/IEC 42001. Starting with deep GRC ownership, the role expands into security engineering by building tooling and automation to make compliance seamless. Reporting to engineering leadership, this position requires working from the Surry Hills headquarters four days a week.

Key Responsibilities

Maintain the risk register, conduct risk assessments for new products and features, and manage third-party and vendor risks.
Oversee the compliance program end-to-end for SOC 2, ISO/IEC 27001, and ISO/IEC 42001, including scoping, control design, evidence gathering, and auditor relations.
Act as the technical voice in enterprise deals by handling security questionnaires and customer trust reviews.
Build and improve tooling that automates evidence collection, monitors control drift, and reports security posture continuously.
Transition into hands-on security engineering tasks involving detection and response, cloud security posture across AWS, and vulnerability management.
Define governance standards for AI systems, model providers, and agentic features while keeping ahead of emerging frameworks.
Contribute to the security incident response process to improve detection, escalation, and learning.
Cultivate a strong security culture by collaborating with and mentoring engineering, product, and design teams.

Requirements

Extensive GRC experience running compliance programs against SOC 2 and ISO/IEC 27001 within a software business.
Strong technical credibility with cloud architecture and security controls.
Experience in enterprise settings, interacting directly with large customer procurement and security review teams.
Pragmatic, flexible, and comfortable with ambiguity and shifting deadlines.
Exceptional, concise communication skills tailored for engineers, board members, and customer CISOs.
Familiarity with or high motivation to master AI compliance frameworks like ISO/IEC 42001.

Nice to Have

Prior familiarity with ISO/IEC 42001 and emerging AI assurance frameworks.
Exposure to AWS security tooling such as GuardDuty, Security Hub, Inspector, and Detective.
Experience with EKS, TypeScript, or infrastructure as code tools like Pulumi or Terraform.

Skills and Tools

AWS
TypeScript
Terraform
Pulumi
EKS
GuardDuty
Security Hub
Inspector
Detective

Salary and Benefits

Competitive base salary with equity options for every builder.
Flexible learning and development allowance of up to $3000 or wellness allowance of up to $1000.
Four weeks of accrued leave, floating public holidays, and gifted bonus Kit Kat days.
Ability to work from anywhere in the world for up to four weeks a year.
Generous parental leave offering 20 weeks for primary caregivers and 12 weeks for secondary caregivers with return-to-work support.
Additional four weeks off after four years of service.

About the Company

Dovetail is the Customer Intelligence Platform for organizations, unifying fragmented feedback into an AI-powered intelligence layer. Founded in 2017, the company employs over 100 team members across offices in Sydney and San Francisco, serving thousands of teams from innovative startups to Fortune 500 companies.

How to Apply

Interested candidates should visit the official Dovetail careers page to apply for the Security Engineering Lead position.

Skills and tech stack

AWSTypeScriptTerraform

Questions candidates ask

What is the location and work setup for the Security Engineering Lead role?

The role is full-time, based in the Sydney headquarters in Surry Hills, and is in-person first at four days a week.

What compliance frameworks will I be responsible for managing?

You will manage SOC 2, ISO/IEC 27001, and ISO/IEC 42001 compliance and surveillance cycles end-to-end.

Is this a purely administrative compliance role?

No. While it starts with deep GRC ownership, the role transitions into hands-on security engineering, building tooling and automation to make compliance a by-product of daily work.

What technical skills or tools are relevant to this position?

Relevant technologies include AWS, TypeScript, Terraform, Pulumi, EKS, and AWS security tooling such as GuardDuty, Security Hub, Inspector, and Detective.

What benefits are offered by Dovetail?

Benefits include equity options, flexible L&D or wellness allowances, four weeks of accrued leave, four weeks of remote work from anywhere per year, generous parental leave, and milestone leave after four years.

Ready to apply?

The application is on the official Dovetail careers page.

Apply on company site