Black Shard

Careers

Build it. Break it.
Answer for it.

Black Shard is a national software engineering and cybersecurity firm, head office in Brisbane. We build and run software on Azure in Australia and secure it from the inside. Three roles are open.

What the work is.

Production, not demos.
The software this firm builds runs in production every day. The work is live systems with real users, not proofs of concept.
Security from the inside.
The engineers who build the software are the same people who attack it. Whichever practice you sit in, you work within reach of the other.
You answer for the work.
The people who scope an engagement deliver it, and answer for it afterwards. No offshore bench, no handoff after the sales call.

Open roles

Three roles, one standard.

Senior Software Engineer

Own systems end to end, from architecture through build to running in production. The work spans everything the firm builds and runs on Azure in Australia, including the Assay attack-surface scanner.

What you will do

  • Design, build and operate production systems on Azure, and stay accountable for them after they ship.
  • Move across several production codebases and stacks rather than a single product lane.
  • Set the engineering bar on the work you touch: architecture, code review, and the way findings become fixes.
  • Threat-model and harden what you build alongside the security practice, then prove the gaps are closed.

What you need

  • Deep experience designing, shipping and operating production software.
  • Strong cloud engineering, ideally on Azure.
  • The habit of treating security as part of the design, not a step at the end.
  • Plain, direct written communication. Your decisions and findings go to clients as written.
  • The right to work in Australia.

How to apply: email info@blackshard.com.au with the subject "Application: Senior Software Engineer".

Software Engineer

Build and fix real systems in production. You will ship features that reach real users, with senior engineers reviewing and shipping beside you.

What you will do

  • Ship features across web applications, APIs and infrastructure that run in production today.
  • Contribute across several production codebases, including the Assay scanner.
  • Fix what testing finds, then re-test to confirm the fix landed.
  • Write code that stands up to review by engineers who also break software for a living.

What you need

  • Solid engineering fundamentals and experience with a modern web stack.
  • Working knowledge of cloud infrastructure. We build and run on Azure.
  • An interest in security and the discipline to build with it in mind.
  • Clear written communication.
  • The right to work in Australia.

How to apply: email info@blackshard.com.au with the subject "Application: Software Engineer".

Cyber Security Consultant

Assessment, hardening and advisory work for Australian businesses. You will test systems the way an adversary would, write findings a client can act on, and stay with the work until the fix is proven.

What you will do

  • Run penetration tests and security assessments against the OWASP and ASD playbooks.
  • Assess and harden cloud environments, including Azure and Entra ID.
  • Take clients through compliance readiness against the Essential Eight, SMB1001 and ISO 27001.
  • Write findings in plain English with reproduction steps and a concrete fix for each one.
  • Re-test remediation and contribute to standing advisory engagements, including vCISO work.

What you need

  • Hands-on penetration testing or security assessment experience.
  • Working knowledge of the frameworks Australian businesses are actually asked for: the Essential Eight, SMB1001, ISO 27001, and the Privacy Act.
  • Enough engineering background to read code and talk credibly to the people who wrote it.
  • Reporting discipline. Every finding is human-validated and reproducible; we do not forward scanner output.
  • The right to work in Australia.

How to apply: email info@blackshard.com.au with the subject "Application: Cyber Security Consultant".

Introduce yourself.

Send a CV and a short note on what you have built or broken. If none of these roles fit but the work sounds like yours, write anyway.