Application Security Engineer

Brownstone Consulting; Canberra; On-site; AUD 110,000 - 150,000; Full time

Job summary

Brownstone Consulting is seeking an Application Security Engineer to strengthen the security of a mission-critical Defence web application. The role sits in Canberra on site, with current NV1 clearance or a recently lapsed clearance that can be reactivated, and Australian citizenship is required.

You’ll remediate SBOM and vulnerability findings, review security architecture, and support accreditation activities within a small, stable team delivering Defence-grade software on a modern stack.

Qualifications

• Application security experience.
• Vulnerability assessment and remediation.
• Secure SDLC and DevSecOps.
• Knowledge of the ISM and Defence accreditation processes.
• Experience securing Angular or other modern web applications.

Responsibilities

• Remediate SBOM and vulnerability findings.
• Review application security architecture.
• Support security assurance and accreditation activities.

Skills

Application security

Vulnerability remediation

Secure SDLC

Defence accreditation

Web app security

Job description

Application Security Engineer | vulnerability management, DevSecOps, SBOM, ISM | NV1 | Canberra.

About Brownstone

Brownstone Consulting is an Australian-owned, Canberra-based Defence ICT company. For seven years our team has designed, built and sustained the Navy's enterprise analytics, assurance system, a suite of Angular, .NET and SQL Server web applications Navy uses every day to manage Fleet readiness, seaworthiness and assurance. It is one of the most successful ICT projects in Defence, used across the Defence Protected and Secret networks, and it is regarded as one of the most successful Defence ICT projects of the past two decades. We are a small, innovative, close-knit team with very little turnover, and we are now bringing the same approach to a new Defence enterprise web application program.

The role

Strengthen the security of a mission-critical Defence web application, working with a team experienced in delivering and accrediting systems on the Defence Secret network.

What you'll do

• Remediate Software Bill of Materials (SBOM) and vulnerability findings
• Review application security architecture
• Support security assurance and accreditation activities

What you'll bring

• Application security experience
• Vulnerability assessment and remediation
• Secure SDLC and DevSecOps
• Knowledge of the ISM and Defence accreditation processes
• Experience securing Angular or other modern web applications
• Build software that Defence people rely on every day, and see the impact of your work
• Work on a modern stack, kept current with the latest Angular and .NET releases
• Join a stable, supportive team that values innovation and gets things done
• Learn from people who have delivered on the Defence Secret network for years

Location: Ideally Canberra, ACT, on site, can be flexible for the right candidate.

Clearance: Current NV1, or a recently lapsed clearance able to be reactivated. Australian citizenship is required.

Employment type: Permanent

• Note: Roles are for an upcoming program and are subject to contract award. By applying, you agree to Brownstone contacting you about including your details in a proposal. We will always confirm with you before naming you.