Application Security Analyst - Cloud & DevSecOps Focus

SmartRecruiters, Inc.; Sydney, City of Melbourne; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

5 Rest Days

Parental leave

Learning and development

Flexible work arrangements

Job summary

Rest is seeking an Application Security Analyst on an 18-month fixed term contract to strengthen the security of our applications, APIs and software delivery practices. You will work with engineering, architecture and product teams to embed security into the development lifecycle and provide pragmatic guidance.

Based in Australia with hybrid work in Sydney/Melbourne, you will lead security assessments, promote secure design, and drive continuous improvement of security tooling and processes,

Qualifications

• Experience in application security within a complex enterprise.
• Experience conducting application security assessments across web apps, APIs and cloud-native environments.
• Strong knowledge of OWASP Top 10 and secure SDLC practices.
• Hands-on with SAST, DAST, SCA, API security testing and secrets detection.
• Familiarity with OWASP ASVS, SAMM, NIST CSF and APRA CPS 234.
• Understanding of CI/CD pipelines and cloud platforms, ideally AWS.
• Experience with APIs, microservices and cloud-native environments.
• Ability to translate technical findings into practical recommendations.

Responsibilities

• Lead application security assessments across web applications, APIs and cloud-based services.
• Partner with engineering and architecture teams to embed security into solution design through threat modelling and secure-by-design practices.
• Validate, prioritise and manage application security findings with risk-based remediation guidance.
• Drive the effectiveness and continuous improvement of application security tooling (SAST, DAST, SCA, API security testing, secrets detection).
• Promote secure SDLC and DevSecOps practices, integrating security controls into CI/CD pipelines.
• Coordinate penetration testing activities, validate findings and oversee remediation outcomes.
• Develop and maintain application security standards, guardrails and secure development practices.
• Provide security guidance, education and enablement to developers and security champions.
• Support security incident investigations where application vulnerabilities or insecure design may be contributing factors.
• Deliver application security reporting, metrics and insights.

Skills

Application security

DevSecOps

Threat modelling

Communication skills

Education

Bachelor's degree in Computer Science/IT or related

Tools

SAST

DAST

SCA

API security testing

Secrets detection

Job description

Rest is seeking an Application Security Analyst on an 18-month fixed term contract to strengthen the security of our applications, APIs and software delivery practices. You will work with engineering, architecture and product teams to embed security into the development lifecycle and provide pragmatic guidance.

Based in Australia with hybrid work in Sydney/Melbourne, you will lead security assessments, promote secure design, and drive continuous improvement of security tooling and processes,