Security Analyst - Hawthorn East

We’ve been trusted to serve Aussie communities since 1914 and grown to become a top 30-listed on the ASX with over 115,000 team members and a portfolio of iconic brands. At Coles Group, you’ll not only get to make a difference to millions of Aussie lives—you’ll also get to see your impact.

A new role = A new way to win together

You belong at Coles Group where we look ahead, have a plan, and are up for the challenge. We learn and grow by taking career-defining opportunities and this one may just be your next.

About the team

Technology is the backbone of our business. Every day, our team solves complex, meaningful problems—helping thousands of team members do their best work and making life easier for millions of customers.

At Coles, Cyber Security plays an important role in protecting our customers, team members and partners. The team is accountable for end-to-end cyber security across the organisation, including security strategy and architecture, governance, identity and access management, DevSecOps, adversarial testing, and detection and response.

This role sits within the Secure By Design team and focuses on strengthening our “shift-left” capabilities. That includes embedding security into development through DevSecOps, expanding automated security testing, and streamlining internal cyber processes through automation.

Working closely with teams across Technology and Cyber Security, this role will help uplift Coles’ cyber security risk and control maturity—ensuring security is built in early, consistently, and at scale.

About the role

This role is suited to a person who enjoys building reliable, automated security solutions and improving how security is embedded into engineering practices. The successful candidate will be comfortable contributing to both security design discussions and code reviews, and will enjoy turning manual security tasks into scalable, repeatable systems.

Essential Experience

• 4–5 years’ experience in cyber security, with demonstrated depth in at least one of the following areas:

• Defensive security, such as threat detection, incident response or system hardening

• Identity and access management

• Cloud security

Experience may come from formal roles, side projects, capture the flag participation, or self-directed learning.

• Solid foundation in software engineering and modern development workflows.

• Hands-on coding capability in at least one programming language, such as Python or similar.

• Experience using AI-augmented coding tools, such as Codex, Claude or similar.

• Solid understanding of secure software development lifecycle, threat modelling, and embedding security controls into delivery without slowing outcomes.

• Demonstrated ability to work autonomously, scope work effectively, prioritise tasks, and deliver outcomes with minimal supervision.

• Strong written and verbal communication skills, with the ability to explain security concepts clearly to both technical and non-technical stakeholders.

• Familiarity with cloud platforms, with Azure preferred, and infrastructure as code practices.

• Knowledge of CI/CD pipelines, deployment automation, and DevSecOps tooling.

Nice to have

• Experience working in large-scale or high-availability environments, such as retail, eCommerce or financial services.
• Familiarity with Google Cloud Platform.
• Industry certifications such as CISSP, CISM, CRISC, OSCP, or cloud security credentials. These are beneficial but not required where equivalent experience exists.
• Contributions to open-source security projects or a demonstrable portfolio, such as GitHub repositories, blogs or conference presentations.

What’s in it for you?

• Flexible working options: We know that work is only one part of your life, so we actively encourage a positive work-life balance and provide hybrid working options to help you achieve it.
• Office perks: Take advantage of our gym facility and fitness classes, free parking, BBQ area, mini-Coles supermarket, fooderie hub where you can sample new products before they hit the shelves, school holiday program and so much more when you come in.
• Discounts: Eligible team members receive 5% discount all year round on your Supermarket and Liquor online and in-store purchases. We also offer additional periods of double discount (10%) at various times throughout the year. As well as hotdeals exclusive to team members that translate into additional savings.
• Reward through recognition: Give and receive recognition, linked to our Coles values, through our digital recognition platform ‘mythanks’. You can accumulate points to redeem in the online shop for exciting gifts and electronic gift cards from an extensive range of retailers.
• Opportunities for learning and development: No matter where you start within our diverse business, you’ll have experiences, exposure, and education to satisfy you. Discover and explore a variety of career development programs and job-specific training.
• Paid parental leave: We understand how important your life outside work is and offer permanent team members paid parental leave to support you in balancing work and family.
• Investment in your future: Our annual team member share plan offer allows eligible team members to make regular pre-tax salary sacrifice deductions to purchase Coles Group shares.

About the recruitment process

We’re continuing to build a gender equitable team, and a culture that is just as diverse, inclusive and welcoming as the communities we serve. We are committed to creating a workplace that is safe and respectful for our team. We encourage applications from people of all ages, cultures (including Aboriginal and Torres Strait Islander peoples), abilities, sexual orientation and gender identities.

We’re happy to adjust our recruitment process to support candidates with disability. For further information and additional contact details visit the ‘Our Recruitment Process’ section of our careers site or email inclusionrecruitment@coles.com.au

Job ID: 165535

#LI-AK2

Employment Type: Full time