Application Security Engineer - AppSec & DevSecOps

Peoplebank; City of Melbourne; Hybrid; AUD 180,000 - 185,000; Full time

Benefits offered by this job

Benefits package

Hybrid work arrangement

Job summary

Peoplebank is hiring an Application Security Specialist/Senior Engineer in Melbourne’s CBD, offering hybrid work and a $180K–$185K package plus benefits. You will partner with engineering teams to embed security across the SDLC, perform threat modelling and security risk assessments, and guide developers on secure coding and standards.

The role covers SAST/DAST testing, WAF management, and security tooling, with strong focus on DevSecOps and secure engineering practices.

Qualifications

• Hands-on experience in application security or secure software development.
• Understanding of how modern applications are designed and built.
• Experience with API security, threat modelling and vulnerability management.
• Exposure to SAST, DAST, WAF and other application security tooling.

Responsibilities

• Embed security across the software development lifecycle with engineers.
• Conduct application security reviews, threat modelling and security risk assessments.
• Identify, assess and help remediate vulnerabilities across applications and APIs.
• Provide practical guidance around secure coding and application security standards.
• Support and optimise security testing processes including SAST and DAST.
• Assist with Web Application Firewall (WAF) management and application security tooling.
• Support DevSecOps and secure engineering practices.
• Champion security awareness and uplift secure development capability across engineering teams.
• Contribute to application security initiatives, standards and continuous improvement.

Skills

Application Security

DevSecOps

Threat Modelling

SAST

DAST

WAF

Secure Coding

Security Architecture

Job description

Application Security Specialist / Senior Application Security Engineer -AppSec & DevSecOps

MelbourneCBD Location | Hybrid Working | Permanent | $180K - $185k + Benefits! l Leading Financial Services firm

Looking to take the next step in your Application Security career?

Join a high performing cyber security team where you will work alongside experienced security practitioners, partner closely with software engineers and help shape secure development practices across a modern technology environment.

This is a great opportunity for an Application Security Engineer or Specialist who understands how applications are built, enjoys working closely with developers and wants to continue building their expertise across secure software development, DevSecOps, offensive security and application security architecture.

What You Will Be Doing

• Partner with software engineers and development teams to embed security across the software development lifecycle
• Conduct application security reviews, threat modelling and security risk assessments
• Identify, assess and help remediate vulnerabilities across applications and APIs
• Provide practical guidance around secure coding and application security standards
• Support and optimise security testing processes including SAST and DAST
• Assist with Web Application Firewall (WAF) management and application security tooling
• Support DevSecOps and secure engineering practices
• Champion security awareness and help uplift secure development capability across engineering teams
• Contribute to application security initiatives, standards and continuous improvement
• Stay current with emerging threats, AI technologies and modern security practices

About You

You could come from Application Security, Software Engineering, Secure Development, Security Engineering, Offensive Security or Technical Consulting.

Ideally, you will bring:

• Hands on experience across Application Security or secure software development
• A good understanding of how modern applications are designed and built
• Development experience with technologies such as Node.js, JavaScript or similar, ideally with front end development exposure
• Experience with API security, threat modelling and vulnerability management
• Exposure to SAST, DAST, WAF and other application security tooling
• Understanding of secure SDLC, DevSecOps and secure coding principles
• Ability to influence developers and engineering teams without creating unnecessary roadblocks
• Strong communication skills and a practical, consulting style approach
• Curiosity, initiative and a genuine interest in continuing to develop technically

Why Join?

• Work alongside highly regarded security specialists and practitioners
• Learn from experienced application security and offensive security professionals, including practitioners who have recently presented at Black Hat and DEF CON
• Strong mentoring and professional development opportunities
• Significant autonomy and ownership
• Exposure to advanced security tools and techniques
• Supportive and collaborative team environment
• Clear career pathway towards Application Security Architecture
• Opportunity to make a genuine impact across both engineering and security

Salary & Benefits

• Up to $180k package inclusive of super, with some flexibility
• Permanent opportunity
• Melbourne CBD location
• Hybrid working, 2 to 3 days in the office
• Professional development and learning opportunities
• Strong long term career growth potential, including the opportunity to progress towards an Application Security Architect role

Australian Citizenship or Permanent Residency is preferred.

Keyword Search

Application Security Engineer, Application Security Specialist, Application Security Analyst, Application Security Consultant, Application Security Advisor, AppSec Engineer

#SCR-nitin-verma

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.