Application Security Consultant - Threat Modelling & SDLC

CyberCX; Australia; On-site; AUD 90,000 - 130,000; Full time

Job summary

CyberCX is seeking an Application Security Consultant to deliver high-quality security consulting to clients in Australia. You will support the Application Security program of works, helping organisations mature their Secure SDLC and build secure applications.

You will perform threat modelling, secure SDLC reviews and training, build relationships with customers, and act as a SME across the practice. The role emphasizes delivering quality reports and guiding next steps with stakeholders.

Qualifications

• 3+ years of experience in application security, product security, pentesting, DevOps or software development.
• Experience conducting threat modelling and secure code reviews.
• Familiarity with Secure SDLC concepts and industry standards (OWASP SAMM, NIST SSDF).

Responsibilities

• Deliver Application Security services (threat modelling, Secure SDLC reviews, secure development training).
• Build strong relationships with diverse customers and identify opportunities.
• Act as SME and technical leader for Application Security services.
• Prepare high quality reports with findings, recommendations and roadmaps; lead presentations with customers.
• Ensure KPIs around delivery, quality and budget are met; monitor time and deviations.
• Assist with standardised methodologies and tooling, and with R&D and practice improvements.

Skills

Application security

Product security

Penetration testing

DevOps

Software development

Tools

Containerization

Infrastructure as Code (IaC)

Job description

CyberCX is seeking an Application Security Consultant to deliver high-quality security consulting to clients in Australia. You will support the Application Security program of works, helping organisations mature their Secure SDLC and build secure applications.

You will perform threat modelling, secure SDLC reviews and training, build relationships with customers, and act as a SME across the practice. The role emphasizes delivering quality reports and guiding next steps with stakeholders.