Application Security Engineer

Brownstone Consulting; Canberra; On-site; AUD 110,000 - 150,000; Full time

Job summary

Brownstone Consulting is an Australian-owned, Canberra-based Defence ICT company delivering secure web applications for Defence. The role focuses on strengthening security for a mission-critical Defence web app, working with a team experienced in accreditation on the Defence Secret network.

You will remediate SBOM and vulnerability findings, review the security architecture, embed secure SDLC practices, and support assurance and accreditation activities in a challenging, mission-critical

Qualifications

• Demonstrated application security experience and remediation skills.
• Experience in secure SDLC and DevSecOps practices.
• Knowledge of ISM and Defence accreditation processes.
• Experience securing modern web apps such as Angular.
• Ability to review security architectures and support accreditation activities.

Responsibilities

• Remediate SBOM and vulnerability findings.
• Review application security architecture.
• Embed secure development practices.
• Support security assurance and accreditation activities.

Skills

Application security

Vulnerability remediation

DevSecOps

Defence accreditation knowledge

Web app security (Angular or similar)

Job description

Application Security Engineer | vulnerability management, DevSecOps, SBOM, ISM | NV1 | Canberra.

About Brownstone

Brownstone Consulting is an Australian-owned, Canberra-based Defence ICT company. For seven years our team has designed, built and sustained the Navy’s enterprise analytics, assurance system, a suite of Angular, .NET and SQL Server web applications Navy uses every day to manage Fleet readiness, seaworthiness and assurance. It is one of the most successful ICT projects in Defence, used across the Defence Protected and Secret networks, and it is regarded as one of the most successful Defence ICT projects of the past two decades. We are a small, innovative, close-knit team with very little turnover, and we are now bringing the same approach to a new Defence enterprise web application program.

The role

Strengthen the security of a mission-critical Defence web application, working with a team experienced in delivering and accrediting systems on the Defence Secret network.

What you'll do

• Remediate Software Bill of Materials (SBOM) and vulnerability findings
• Review application security architecture
• Embed secure development practices
• Support security assurance and accreditation activities

What you'll bring

• Application security experience
• Vulnerability assessment and remediation
• Secure SDLC and DevSecOps
• Knowledge of the ISM and Defence accreditation processes
• Experience securing Angular or other modern web applications

Why join us

• Build software that Defence people rely on every day, and see the impact of your work
• Work on a modern stack, kept current with the latest Angular and .NET releases
• Join a stable, supportive team that values innovation and gets things done
• Learn from people who have delivered on the Defence Secret network for years

Location: Ideally Canberra, ACT, on site, can be flexible for the right candidate.

Clearance: Current NV1, or a recently lapsed clearance able to be reactivated. Australian citizenship is required.

Employment type: Permanent