Information Security Engineer

CORTO

Information Security Engineer at CORTO designing and implementing security controls. Collaborating with teams to ensure security across cloud, application, and AI-enabled workflows.

Posted 6/15/2026full-timeSydney • 🇦🇺 AustraliaMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

AWSCloud

About the role

Key responsibilities & impact

Join our dynamic Information Security team to help design, implement, and continuously improve security controls across our Application Infrastructures and organisation.
Design, implement, and maintain cloud security controls across IAM, networking, logging, encryption, monitoring, and related infrastructure.
Review cloud architectures and infrastructure-as-code to ensure alignment with security standards, best practices, and secure design principles.
Define and maintain cloud security guardrails, technical standards, patterns, documentation, and playbooks.
Manage and improve security tooling, including CNAPP, SIEM, XDR, vulnerability scanning, detection, and response capabilities.
Monitor, investigate, and respond to security alerts and incidents, including root cause analysis and remediation tracking.
Conduct vulnerability assessments, risk analysis, threat modelling, design reviews, and application, container, and API security assessments.
Support SOC 2 compliance, customer trust requests, security questionnaires, third-party risk assessments, and collaboration with DevOps, Engineering, and IT teams.

Requirements

What you’ll need

3–5 years of experience in Information Security Engineering roles.
Strong hands-on experience securing AWS environments.
Solid understanding of:
IAM, least-privilege access, and identity federation
Network security
Logging, monitoring, and alerting
Encryption in transit and at rest
Microsoft Entra security
Vulnerability management tools
Endpoint security and MDM
Good understanding of security frameworks such as SOC 2, CIS and NIST, or similar.
Familiarity with cloud security best practices and shared responsibility models.
Working knowledge of incident response processes

Benefits

Comp & perks

Your work matters. We solve real world problems that improve and support local, everyday law firms. So they can do their best work for the people in the communities they serve.
Make an impact. You won’t be another ‘cog in the wheel’ here. We give full trust and autonomy for you to be heard, to work on big & complex projects – and to make a real difference.
Work with a group of authentic, passionate people who love what they do.
Well-funded and global. CORTO is part of ATI Global – one of the largest international LegalTech companies.
Flexible and hybrid working. We engage, share, and collaborate on ideas and workflows.
Career and learning opportunities - we move fast and need smart people to get us where we're going. We are a scaling business and looking for people who want to grow with us.
Have fun with us. Celebrations. Socials. Sports teams. Access to sailing and yacht events.
We value your well-being with additional time off, gym membership and other perks.
Fast-paced tech environment, if we don't disrupt ourselves someone else will do it!
Access to LEAP Home - a program unique to the ATI Group to support you in buying your primary residence.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

cloud securityIAMnetwork securityencryptionvulnerability managementincident responsesecurity assessmentsrisk analysisthreat modellingapplication security

Certifications

SOC 2CISNIST