Application Security Consultant

Nixil Pty; Melbourne; On-site; AUD 120,000 - 160,000; Part time

Job summary

Nixil Pty in Melbourne is seeking an experienced Application Security Consultant to assess an internal Workflow Solution, identify security risks and guide practical improvements aligned with DTP cybersecurity requirements. Working with DTP Cyber Security teams, you will review Microsoft cloud configurations, assess controls and deliver a remediation roadmap through clear, actionable security outcomes.

This role combines technical investigation, risk assessment and stakeholder engagement to

Qualifications

• At least five years’ experience conducting application security assessments.
• Experience with Power Apps and Power Automate.
• Experience with workflow or business process management platforms.
• Strong stakeholder engagement and communication skills.

Responsibilities

• Review security configurations across Microsoft Power Platform and SharePoint Online, identifying vulnerabilities and exposure risks.
• Assess compliance with DTP Application Security Standards, documenting gaps and remediation requirements.
• Conduct a comprehensive application security risk assessment evaluating likelihood, impact and criticality.
• Develop prioritised mitigation strategies and a practical remediation roadmap.
• Engage with technical and business stakeholders to communicate findings and recommended actions.

Skills

Power Apps

Power Automate

Stakeholder engagement

Application security assessment

Education

Bachelor's degree

Tools

Azure DevOps

Jira

Job description

• Location: Melbourne CBD
• Contract: 3 months, with potential for extension

Bring your application security expertise to a role where your recommendations will shape the security of an enterprise workflow solution.

We’re seeking an experienced Application Security Consultant to assess an internal Workflow Solution, identify security risks and guide practical improvements aligned with DTP cybersecurity requirements.

Working directly with DTP Cyber Security teams, you’ll review Microsoft cloud configurations, assess application security controls and develop a prioritised remediation roadmap. This is an opportunity to combine technical investigation, risk assessment and stakeholder engagement to deliver clear, actionable security outcomes.

What you’ll do

• Review security configurations across Microsoft Power Platform and SharePoint Online, identifying vulnerabilities, control weaknesses and exposure risks.
• Assess compliance with DTP Application Security Standards, documenting control gaps, non-compliance and remediation requirements.
• Conduct a comprehensive application security risk assessment, evaluating risk likelihood, impact and criticality.
• Develop prioritised mitigation strategies and a practical remediation roadmap.
• Engage with technical and business stakeholders to communicate findings and recommended actions.

Your key deliverables will include a Cloud Security Configuration Review Report, Security Assurance and Compliance Assessment Report, Application Security Risk Assessment Report, and Risk Mitigation and Remediation Roadmap.

What you’ll bring

You must demonstrate:

• At least five years’ experience conducting application security assessments.
• Experience assessing applications built on Power Apps and Power Automate.
• Experience with workflow or business process management platforms.
• Strong stakeholder engagement and communication skills, including the ability to explain security risks and remediation priorities clearly.

You’ll also bring experience and capability across:

Enterprise testing and delivery

• Enterprise application testing within Agile and hybrid delivery environments.
• Functional, integration, regression and risk-based testing.
• User Acceptance Testing coordination, defect lifecycle management, release validation and deployment support.

Tools and technologies

• Azure DevOps, Jira or equivalent test management platforms.
• API and integration testing, SQL and data validation, and test automation frameworks.
• Enterprise web applications and cloud-hosted environments.
• Identity and access management solutions and service-oriented architectures.
• Data migration and transformation testing.

Security and compliance

• Victorian Government ICT standards and cybersecurity testing principles.
• Privacy and data protection requirements.
• Secure development and deployment practices.
• Risk and compliance frameworks.

Why apply?

Put your expertise to work across Microsoft cloud technologies, collaborate directly with cybersecurity specialists and turn assessment findings into a clear plan for stronger application security.