Application Security Consultant & Threat Modelling Lead

CyberCX; Sydney; On-site; AUD 110,000 - 160,000; Full time

Job summary

CyberCX is seeking an Application Security Consultant to deliver high-quality security consulting services to clients in Australia. You will help organisations build and mature secure SDLC processes while guiding secure development practices.

Lead threat modelling and SDLC reviews, provide training, and produce clear reports. You will build strong client relationships, manage delivery timelines, and contribute to practice improvement.

Qualifications

• 3+ years of experience in application security, product security, or related areas.
• Experience conducting threat modelling exercises and design reviews.
• Experience with secure code reviews across languages and frameworks.
• Experience implementing Secure SDLC and DevSecOps practices against industry standards.

Responsibilities

• Deliver Application Security services such as threat modelling, SDLC reviews and secure development training to clients.
• Build strong, long-lasting relationships with customers and explore opportunities within existing and new clients.
• Act as a subject matter expert and technical leader for Application Security services.
• Prepare high-quality reports detailing security issues, recommendations, and solutions; lead presentations with customers.

Skills

Threat modelling

Secure SDLC

DevSecOps

Secure code reviews

CI/CD pipelines

Containerisation

IaC

OWASP SAMM

NIST SSDF

Tools

Docker

Kubernetes

Job description

CyberCX is seeking an Application Security Consultant to deliver high-quality security consulting services to clients in Australia. You will help organisations build and mature secure SDLC processes while guiding secure development practices.

Lead threat modelling and SDLC reviews, provide training, and produce clear reports. You will build strong client relationships, manage delivery timelines, and contribute to practice improvement.