About Envato
Everything we do is to empower creative professionals to thrive, with unlimited access to high-quality assets, tools, tutorials and more. Essentially, we exist to empower creatives to thrive.
We proudly support the lives of creative professionals all over the world, from web developers and graphic designers, to marketers, videographers, photographers and more. We’ve built a community where anyone can get their creative projects done, and where creators bring their ideas to life and in the process, earn a living doing what they love.
We’re a global values led company, blending purpose and profit, and a passionate B Corp we are committed to making a positive impact on the communities we engage in. We have long embraced flexible ways of working, and we’re proud of how we keep our global team connected. Our roles can be based across Australia, New Zealand and Mexico.
You can read more about us on our company blog, including news of our acquisition by Shutterstock Inc in 2024.
About Us
At Envato, we empower designers and creatives to do their best work and to bring their creative ideas to life! Millions of people around the world visit Envato to buy and sell professionally made creative assets and templates, use customisable mockups and design templates, and learn creative skills.
We’re B Corp certified and strongly believe in succeeding sustainably as one global team. Community spirit is at the heart of everything we do which means we give considered thought to our whole community in our decisions, our actions, and desired outcomes. This includes our team, our authors, customers, shareholders and society.
Role Purpose
The Security Operations team plays a crucial role within the IT Operations & Technology Experience department, which is part of the Technology division supporting Envato employees across Australia, New Zealand, Mexico, and the United States.
The purpose of the IT Operations & Technology Experience is to provide sustainable and secure high quality technology experiences that enable staff to succeed. Productive and secure day one and always.
Role Overview
Reporting to the Senior IT Operations & Technology Experience Manager, the Senior Security Engineer will take the lead in securing the organisation's IT infrastructure, applications, and data. Collaborating with Security Analysts, Managed Security Service Provider (MSSP), and the IT Systems Operations and Product Security teams. -
Key Duties and Responsibilities
Security Monitoring & Incident Response
- Optimise and fine-tune SIEM rules, policies, and thresholds in collaboration with the MSSP.
- Lead incident response efforts, including containment, mitigation, and resolution.
- Conduct post-incident analysis, forensic investigations.
- Security automation (SOAR) implementation.
- Monitor and investigate security alerts from EDR, DLP, and email security tools.
SaaS & Identity Security
- Oversee security configurations for SaaS applications (Google Workspace, Slack, Okta, etc.).
- Manage authentication policies and access controls within SaaS tools and IAM.
- Conduct security audits and ensure SaaS tools align with compliance requirements.
Endpoint, Network, and Email Security
- Manage and secure endpoint protection (EDR), antivirus, firewalls, and VPN security.
- Enforce network security best practices and assist in vulnerability management efforts.
- Oversee email security configuration, phishing prevention, and spam filtering.
Compliance & Risk Management
- Perform security audits and risk assessments for systems, vendors, and applications.
- Collaborate with leadership to develop and implement risk mitigation strategies, ensure PCI and SOX compliance, and maintain GDPR regulatory compliance through proactive security control monitoring.
Vendor Collaboration & Continuous Improvement
- Participate in security vendor meetings (MSSP, Crowdstrike, and others) to enhance security posture.
- Stay up-to-date on industry trends, security threats, and best practices.
Be aware and accountable to your responsibilities in relation to workplace health and safety obligations.
Key Skills and Experience
- 5+ years of experience in IT security or cybersecurity engineering.
- Proficiency with SIEM tools (Sumo Logic) and SOC operations.
- Hands-on experience with EDR, DLP, firewalls, VPNs, IAM, and security automation.
- Ideally experience in fast growing digital companies, requiring agile planning to manage fast growing operations.
- Familiarity with a variety of information security standards and frameworks, (e.g PCI/DSS, NIST Cybersecurity Framework, ISO27001).
- Familiarity with current and evolving international privacy obligations (e.g. Australian Privacy Principles, European Privacy principles: DPD, GDPR, EU-US-Shield..etc)
- Experience securing SaaS tools and applications.
- Scripting and automation skills (Ruby, Python) preferred.
- Relevant industry certifications (CISSP, CISM, CEH, GCIH, or equivalent) preferred.
#LI-Remote
Life at Envato
• Flexible Working - Remote-first with flexibility for you to manage work and life as you need.
• Work from Anywhere - Apply to work in another location for up to 3 months per calendar year.
• Conoce Mexico - A unique travel benefit for you to explore and visit new places across Mexico.
• Connection Budget - An annual budget to connect with the team IRL where and when possible.
• Learning Budget - Study leave and an annual budget for you to put towards your learning and development.
• Home Office Allowance - A contribution towards your set-up and a monthly allowance to support work from home costs.
• Wellbeing - Access to a holistic assistance program that provides support in many areas of life and health.
• Volunteer Leave - 2 days per calendar year to volunteer and give back to the community.
• Parental Leave - 20 weeks paid primary carer leave, and 6 weeks paid secondary carers leave.
• Christmas Bonus, Paid Holidays and Holiday Bonus - We offer 30 days paid in December, you will have 12 days vacation in the first year, and you will earn 100% of holiday bonus.
• Grocery tickets - We offer you a monthly amount of 5% (subject to the legal cap) in food vouchers, which can be used in markets, pharmacies and more.
• 5% Saving Funds (fondo de ahorro).
• Private Health Insurance (SGMM).
By submitting your application you are agreeing to our Privacy Policy. If you would like to understand how we handle personal information before submitting your application, please read through our Privacy Policy.
Research shows candidates from neurodiverse and underrepresented backgrounds often only apply for roles if they meet all the criteria. We like to make our hiring decisions based on lived experience, so if you’re keen to apply and need reasonable adjustments please let us know.
We appreciate the time you’ve taken to apply to Envato and we're committed to responding to every applicant.
Top Skills
What We Do
Hi there! We're so happy you found us. Founded in a Sydney garage in 2006, Envato was born from a desire to make a positive impact. Now, 15 years later, we remain independently owned and committed to creating opportunities for our creatives to thrive. As a proud B Corp, we focus on a long-term vision, balancing purpose and profit for sustainable growth. We’re one of the world’s leading online creative communities for creative assets and tools. We provide genuine opportunities for creators worldwide to create, earn and grow. In the process, we're striving to make creative success accessible and achievable for all, both independently and as part of a global community. There are many ways to work, and flexibility is key. A remote-first culture is in our DNA, and wherever our people are in the world, we pledge to provide a unique and caring work environment. We have offices in Melbourne, Guadalajara, and Los Angeles, with over 600 people worldwide. From engineers and product owners to designers and marketers, our global and diverse teams are packed with talented and creative individuals who are fiercely passionate about working in a values-driven business. Envato is about more than just the bottom line. It’s work made with heart.
