Application Security Consultant

CyberCX; Australia; On-site; AUD 90,000 - 130,000; Full time

Job summary

CyberCX is seeking an Application Security Consultant to deliver high-quality security consulting to clients in Australia. You will support the Application Security program of works, helping organisations mature their Secure SDLC and build secure applications.

You will perform threat modelling, secure SDLC reviews and training, build relationships with customers, and act as a SME across the practice. The role emphasizes delivering quality reports and guiding next steps with stakeholders.

Qualifications

• 3+ years of experience in application security, product security, pentesting, DevOps or software development.
• Experience conducting threat modelling and secure code reviews.
• Familiarity with Secure SDLC concepts and industry standards (OWASP SAMM, NIST SSDF).

Responsibilities

• Deliver Application Security services (threat modelling, Secure SDLC reviews, secure development training).
• Build strong relationships with diverse customers and identify opportunities.
• Act as SME and technical leader for Application Security services.
• Prepare high quality reports with findings, recommendations and roadmaps; lead presentations with customers.
• Ensure KPIs around delivery, quality and budget are met; monitor time and deviations.
• Assist with standardised methodologies and tooling, and with R&D and practice improvements.

Skills

Application security

Product security

Penetration testing

DevOps

Software development

Tools

Containerization

Infrastructure as Code (IaC)

Job description

The Application Security Consultant is responsible for delivering high-quality application security consulting services to CyberCX clients.

They play a critical role in supporting Application Security program of works to help organisations build and maintain secure applications and mature their Secure SDLC processes.

• Deliver Application Security services such as threat modelling, Secure SDLC reviews and secure development training to organisations
• Build out and promote strong, long-lasting relationships with a diverse range of customers, and identify and explore opportunities within existing and new customers.
• Act as a subject matter expert and technical leader both within STA and externally across practice for Application Security services.
• Prepare high quality reports detailing security issues, making recommendations, and identifying solutions, and lead presentations and discussions with customers around Application Security work performed, key results, strategies, processes recommendations and next steps/roadmap to success
• Ensure that KPIs around client expectation management, delivery deadlines, quality of work and deliverables etc are met, including maintaining visibility of project budget vs actual delivery time and flowing up deviations.
• Assist with the development of standardised methodologies, identifying and building tools, and improve processes
• Assist with R&D, innovation, and practice improvement activities

Preferred Qualifications, Experience & Skills

• 3+ years of experience in relevant areas such as application security, product security, penetration testing, DevOps and/or software development, including but not limited to the following:
• Conducting threat modelling exercises and design reviews
• Implementing DevSecOps processes and managing CI/CD pipelines
• Conducting secure code reviews for various languages and frameworks
• Performing Secure SDLC and Secure DevOps reviews against industry standards such as OWASP SAMM and NIST SSDF
• Experience with containerisation and Infrastructure as Code (IaC)

Personal Attributes

• Professional and ethical, you inspire trust and confidence through integrity and respect
• Customer-obsessed and a self-starter, you go above and beyond to deliver extraordinary results and experiences for customers
• Innovative and open to change, you are focused on finding opportunities for continuous improvement and ways to optimise work processes
• Collaborative and with an enterprise mindset, you speak up and welcome all input, opinions and questions
• Emotionally intelligent, you lead with empathy, connection, and assertiveness

About CyberCX

CyberCX is the leading independent cyber security services organisation in Australia and New Zealand. CyberCX is Australia’s greatest force of cyber security professionals.

CyberCX has united the country’s most trusted cyber security companies to deliver the most comprehensive end to end cyber security services offering to Australian enterprises and governments.

We are cyber security experts first and foremost. We’re a unified team of highly qualified, certified and skilled professionals working together on the same mission: to protect and defend Australian organisations from cyber threats.

We specialise in: Strategy & Consulting | Governance, Risk & Compliance | Security Testing & Assurance | Identity & Access Management | Network & Infrastructure Solutions | Managed Security Services | Cloud Security & Solutions | Digital Forensics & Incident Response | Cyber Capability, Education & Training