Application Security Engineer

Whizdom; Sydney; On-site; AUD 130,000 - 170,000; Part time

Job summary

Whizdom in Sydney, NSW seeks a Senior Application Security Engineer to lead the implementation of a Secure Code Scanning platform within a complex software environment.

You will integrate automated security testing into source control and CI/CD pipelines, collaborating with DevOps, development and security teams to establish strategies and governance for vulnerability management and secure coding practices.

Responsibilities

• Lead the implementation and onboarding of Secure Code Scanning platforms and integrate with source control and CI/CD pipelines.
• Define scanning strategies, remediation workflows, and vulnerability‑management processes.
• Collaborate with development, DevOps and security teams to establish automation and governance for secure coding practices.
• Provide hands‑on support during rollout and post‑go‑live stabilisation of security platforms.
• Mentor development teams to promote secure coding and DevSecOps best practices.

Skills

Application Security

Secure Code Scanning

SAST

DevSecOps

CI/CD Pipelines

Vulnerability Management

Snyk

Fortify

Checkmarx

Veracode

Tools

GitHub

GitLab

CI/CD tooling

Job description

Senior Application Security Engineer

• Sydney, NSW


• 6-Month Contract

We are partnering with a leading enterprise organisation to engage an experienced Senior Application Security Engineer to lead the implementation and adoption of secure code-scanning capabilities across a complex software development environment.

This opportunity will suit a hands‑on Application Security professional with strong experience implementing enterprise security platforms and embedding secure coding controls throughout the software development lifecycle.

About the Role

You will lead the implementation and onboarding of a Secure Code Scanning platform, integrating automated security testing into source‑control systems and CI/CD pipelines.

Working closely with development, DevOps and security teams, you will establish scanning strategies, remediation workflows, quality gates and vulnerability‑management processes. You will also support implementation, testing, rollout and post‑go‑live stabilisation while helping development teams adopt secure coding practices.

Key Responsibilities

• Lead the implementation and onboarding of Secure Code Scanning platforms such as Snyk, Fortify, Checkmarx or Veracode.


• Integrate security‑scanning capabilities with GitHub, GitLab and CI/CD pipelines.


• Establish automated scanning, policy enforcement and secure coding controls across the software development lifecycle.


• Collaborate with development, DevOps and security teams to define scanning strategies and remediation workflows.


• Implement quality gates, exception‑handling processes and vulnerability‑remediation SLAs.


• Establish vulnerability triage, risk‑prioritisation and remediation‑tracking processes.


• Identify integration dependencies, developer‑adoption challenges and potential performance impacts.


• Develop technical standards, deployment procedures, operational runbooks and governance processes.


• Provide hands‑on support throughout implementation, testing, rollout and post‑go‑live stabilisation.


• Mentor development teams and promote secure coding and DevSecOps best practices.

Skills & Experience

To be successful in this role, you will have:

• Demonstrated experience implementing Application Security or Secure Code Scanning solutions within large enterprise environments.


• Strong hands‑on experience with one or more platforms such as Snyk, Fortify, Checkmarx or Veracode.


• Strong knowledge of Static Application Security Testing (SAST) and vulnerability‑management practices.


• Experience integrating security tools with GitHub, GitLab and CI/CD pipelines.


• Sound understanding of secure software development lifecycle principles and DevSecOps practices.


• Experience establishing vulnerability triage, risk‑prioritisation and remediation processes.


• Ability to identify implementation risks, integration dependencies and developer‑adoption challenges.


• Experience producing technical standards, deployment documentation, runbooks and governance processes.


• Strong stakeholder engagement skills and the ability to collaborate across development, DevOps and security teams.


• The ability to mentor technical teams and promote practical secure coding practices.

If you are an experienced Application Security Engineer with a strong background in Secure Code Scanning, SAST and DevSecOps implementation, we’d love to hear from you

Candidates will need to be willing to undergo pre‑employment screening checks, which may include identity and work rights checks, security clearance verification and any other client‑requested checks