SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Everlab is an Australian healthtech startup building infrastructure to connect healthcare services and provide comprehensive health data and personalized care. The company recently closed a $65M Series A and has experienced 23x revenue growth since June 2025.
This is a hands-on Senior Security Engineer role where you will own security and compliance end-to-end as the single security owner. You'll be responsible for building and scaling the security function without proportionally scaling headcount, leveraging automation and AI tooling.
Key responsibilities include:
- Owning and maintaining the risk register as a single source of truth, identifying risks across the business and operational surface, assessing and prioritizing by business impact, and driving closure
- Performing hands-on security work including access reviews, least-privilege implementation, SaaS/SSO/MFA configuration, cloud (GCP) and identity hardening, and building lightweight automation
- Driving cross-team security fixes to completion with engineering, platform, and IT teams
- Owning compliance programs for ISO 27001 and GDPR through Vanta, maintaining controls and evidence, and achieving audit readiness and certification
- Managing the reactive security surface including vendor security questionnaires, procurement reviews, third-party assessments, incident response, and security monitoring
- Scaling the security function through AI tooling and automation for repeatable processes like annual audits
You'll need 5+ years of security experience as an individual contributor with broad remit across internal IT security and product security, ideally in startup environments. Strong risk judgment, compliance expertise (GDPR, ISO 27001, SOC 2), and experience in regulated sensitive-data environments (healthcare PHI preferred) are essential. Technical depth in cloud security (AWS/GCP), identity and access management, SaaS security, and application security fundamentals required. You should be a structural thinker who favors automation and preventative controls, an autonomous operator who drives outcomes independently, and comfortable using AI to move faster. The role is hybrid with 3 days per week in-office in Sydney (Surry Hills).
