API & Platform Engineer - 12 Month Fixed Term Contract at Rest1

Department: Data Insights & RiskSeniority in posting: senior

Setup: Hybrid
Location: Sydney, New South Wales
Type: Full-time, Contract
Level: mid
Posted: Sep 30, 2026

Description

Rest is hiring an API & Platform Engineer for a 12-month fixed-term contract in Sydney CBD, with hybrid working. The role owns risk-prioritised remediation of application, API, dependency, repository, and supply-chain security findings across GitHub and CI/CD environments. Responsibilities include fixing SAST, DAST, and SCA issues, upgrading or removing vulnerable dependencies, securing repositories and workflows, improving GitHub Actions and security gates, and documenting controls and risk exemptions. The role requires hands-on application and API security remediation, Node.js, TypeScript, Python, GitHub, CI/CD, cloud-native platforms, and software supply-chain security knowledge.

Required Skills

Node.js
TypeScript
Python
SAST
DAST
SCA
GitHub
CI/CD
Secrets management
OWASP Top 10
Supply-chain security

Additional Information

Required Previous Experiences: Hands-on experience implementing security fixes across modern application and API codebases using Node.js, TypeScript, and Python
Experience remediating SAST, DAST, and SCA findings across vulnerable code, open-source, and third-party dependencies
Practical GitHub administration and security experience covering repository governance, access controls, branch protection, pull-request requirements, GitHub Actions, and secrets management
Experience with cloud-native platforms, APIs, containers, serverless services, and infrastructure as code
CI/CD security engineering experience involving automated security testing, GitHub Actions workflows, quality gates, vulnerability management, and remediation validation
Translation Company Name: Rest