Application Security Analyst: DevSecOps & Secure SDLC (18-Month FTC)

Rest; Sydney; Hybrid; AUD 140,000 - 210,000; Full time

Benefits offered by this job

Hybrid working

5 Rest Days (wellbeing days)

Paid parental leave (22 weeks)

AI & Data Academy

Learning and development opportunities

Income Protection Insurance

Job summary

Rest, one of Australia’s largest profit-to-member super funds, invites applications for an Application Security Analyst on an 18 month fixed term contract. The role is based in Sydney or Melbourne with a hybrid mix of CBD office and remote work, focusing on securing applications, APIs and software delivery.

You’ll partner with engineering, architecture and product teams to embed secure-by-design practices, strengthen threat modelling, and drive secure SDLC and DevSecOps across cloud-native

Qualifications

• Experience in application security, DevSecOps in enterprise environments.
• Experience with app security assessments across web apps, APIs and cloud-native.
• Knowledge of OWASP Top 10, threat modelling, vulnerability management and secure SDLC.
• Hands-on with SAST/DAST/SCA and API security testing tools.

Responsibilities

• Lead application security assessments across web apps, APIs and cloud-based services.
• Embed security into solution design through threat modelling and secure-by-design practices.
• Validate, prioritise and manage findings with risk-based remediation guidance.
• Drive effectiveness of tooling: SAST, DAST, SCA, API security testing and secrets detection.
• Promote secure SDLC and DevSecOps within CI/CD pipelines and software delivery processes.
• Coordinate penetration testing activities and oversee remediation outcomes.
• Develop and maintain application security standards, guardrails and secure development practices.
• Provide security guidance to developers, engineers and security champions.
• Support security incident investigations related to application vulnerabilities.
• Deliver application security reporting, metrics and insights.

Skills

Application security

DevSecOps

Threat modelling

Secure SDLC

CI/CD practices

Cloud platforms

Education

Bachelor's degree in CS/IT

Tools

SAST tools

DAST tools

SCA tools

API security testing

Secrets detection

Job description

Rest, one of Australia’s largest profit-to-member super funds, invites applications for an Application Security Analyst on an 18 month fixed term contract. The role is based in Sydney or Melbourne with a hybrid mix of CBD office and remote work, focusing on securing applications, APIs and software delivery.

You’ll partner with engineering, architecture and product teams to embed secure-by-design practices, strengthen threat modelling, and drive secure SDLC and DevSecOps across cloud-native