Application Security Engineer - 12-Month Fixed Term, Hybrid

Rest; Sydney; Hybrid; AUD 150,000 - 185,000; Full time

Benefits offered by this job

Rest Days

Parental leave

Learning opportunities

Income Protection Insurance

Job summary

Rest is seeking an Application Security Engineer to join the CTEM function on a 12‑month fixed term contract in Sydney. You will embed with API and Platform Engineering to strengthen security practices and scale them across teams, delivering risk‑based remediation and closure.

You will triage findings from SAST/DAST/SCA and other tooling, prioritise based on impact, and coordinate secure SDLC controls across the lifecycle. Strong GitHub security knowledge is essential.

Qualifications

• Strong analytical capability and prioritisation of findings.
• Knowledge of SAST/DAST/SCA and API/software supply-chain risks.
• Experience defining secure SDLC controls and remediation guidance.

Responsibilities

• Analyse and triage security findings from multiple tooling.
• Prioritise findings by severity and business context.
• Provide remediation guidance and track closure.
• Coordinate secure SDLC controls across design to maintenance.
• Govern GitHub security and integrations, including protections and reviews.
• Monitor backlog health and coordinate risk exemptions.

Skills

SAST/DAST/SCA

OWASP Top 10

API Security

GitHub security

Secure SDLC

Tools

Container scanning

Job description

Rest is seeking an Application Security Engineer to join the CTEM function on a 12‑month fixed term contract in Sydney. You will embed with API and Platform Engineering to strengthen security practices and scale them across teams, delivering risk‑based remediation and closure.

You will triage findings from SAST/DAST/SCA and other tooling, prioritise based on impact, and coordinate secure SDLC controls across the lifecycle. Strong GitHub security knowledge is essential.