Technical Security Consultant

Our Purpose 

At Xero, we’re here to help you supercharge your business. We do this by automating routine tasks, surfacing actionable insights and connecting businesses with the right data, advisors and apps. When that happens, we’re not only making life better for small business, we’ll be building a stronger economy that can change the world.

About the team and role

Join Xero as a Technical Security Consultant where you will have a strong interest and understanding of security concepts, infrastructure or application development and use this to provide support and solutions and develop an understanding of good security practice to our engineering teams.

New Technical Security Consultants will undergo an initial multi-disciplined mentoring programme with the Team Lead and Leads in preparation for conducting discrete tasks.  You will conduct broader technical consultancy. You will contribute to technical security consultancy initiatives, consistently challenging the norm and delivering quality solutions. You will collaborate with the team lead and other leads to continue fostering an ever-learning culture.

This is an exciting opportunity for those with an engineering or consultancy background eager to advise engineering teams on security!

What you'll do

• This is a very people-focused support role - we prefer to be on the ground with developers, rather than in an ivory tower.
• Develop and maintain documentation to make our guidance available to all. This position is often orientated around the creation of documentation.
• Develop knowledge of offensive and defensive security practices to create pragmatic and wide-reaching default approaches for the teams we support.
• Trace a potential security issue to a particular bug within a codebase, and work with development teams to remediate the problem.
• Teach and train other members of the team
• Lead specific security driven initiatives
• Help develop new initiatives to create new industry-leading approaches to security issues.
• Be a champion for secure best practice and customer safety.

What success looks like

• Developing an ever-growing set of competencies by learning on the job.
• Eagerly taking on new challenges, demonstrating a passion for doing security well.
• Driven new initiatives to their desired outcomes 
• Becoming a subject matter expert on a technology niche.
• Sharing their knowledge amongst the team
• Contributing to and improving security guidelines, patterns and practices.
• Providing input into developing Xero's future security state in a way that is industry-leading.

What you'll bring with you

• Has good examples of past technology research and investigation.
• Has previously self-taught themselves an aspect of technology.
• Some familiarity of web services and web application development.
• Linux/Unix knowledge is beneficial.
• Hands-on experience with AWS

Why Xero? 

Offering very generous paid leave to use however you’d like (plus statutory holidays!), dedicated paid leave to care for your physical and mental wellbeing as well as an Employee Assistance Program to access mental health care for you and your family, free medical insurance, wellbeing and sports programmes, employee resource groups, 26 weeks of paid parental leave for primary caregivers, an Employee Share Plan, beautiful offices, flexible working, career development, and many other benefits that reflect our human value, you’ll do the best work of your life at Xero.