Application Security Engineer - AppSec & DevSecOps

Peoplebank; Melbourne; Híbrido; AUD 200.000 - 220.000; Jornada completa

Descripción de la vacante

Peoplebank, in Melbourne CBD, seeks an Application Security Specialist / Senior Application Security Engineer for a permanent hybrid role with a $200k–$220k package plus super. You will help shape secure development practices across a modern technology environment.

You will partner with engineers, perform threat modelling and security reviews, and guide secure coding. The role covers DevSecOps, API security, SAST/DAST tooling and staying ahead of threats.

Formación

• Hands-on experience across Application Security or secure software development.
• Understanding of modern application design and build processes.
• Development experience in Node.js or JavaScript, with some front-end exposure.
• Experience with API security, threat modelling and vulnerability management
• Exposure to SAST, DAST, WAF and other application security tooling
• Knowledge of secure SDLC and DevSecOps principles
• Ability to influence developers and engineering teams effectively
• Strong communication and consulting style
• Curiosity and drive to develop technically

Responsabilidades

• Partner with engineers to embed security across the SDLC.
• Conduct application security reviews, threat modelling and risk assessments.
• Identify, assess and remediate vulnerabilities in applications and APIs.
• Provide guidance on secure coding and security standards.
• Support security testing processes including SAST and DAST.
• Assist with WAF management and security tooling.
• Promote DevSecOps and secure engineering practices.
• Champion security awareness across engineering teams.
• Stay current with emerging threats and AI in security.

Conocimientos

Application Security

Node.js

JavaScript

Threat Modelling

SAST/DAST tools

DevSecOps

Communication skills

Herramientas

WAF

Descripción del empleo

Application Security Specialist / Senior Application Security Engineer – AppSec & DevSecOps

Melbourne CBD | Hybrid Working | Permanent Opportunity

$200K to $220k package

Leading Financial Services firm

Looking to take the next step in your Application Security career?

Join a high performing cyber security team where you will work alongside experienced security practitioners, partner closely with software engineers and help shape secure development practices across a modern technology environment.

This is a great opportunity for an Application Security Engineer or Specialist who understands how applications are built, enjoys working closely with developers and wants to continue building their expertise across secure software development, DevSecOps, offensive security and application security architecture.

What You Will Be Doing

• Partner with software engineers and development teams to embed security across the software development lifecycle
• Conduct application security reviews, threat modelling and security risk assessments
• Identify, assess and help remediate vulnerabilities across applications and APIs
• Provide practical guidance around secure coding and application security standards
• Support and optimise security testing processes including SAST and DAST
• Assist with Web Application Firewall (WAF) management and application security tooling
• Support DevSecOps and secure engineering practices
• Champion security awareness and help uplift secure development capability across engineering teams
• Contribute to application security initiatives, standards and continuous improvemen
• Stay current with emerging threats, AI technologies and modern security practices

About You

You could come from Application Security, Software Engineering, Secure Development, Security Engineering, Offensive Security or Technical Consulting.

Ideally, you will bring:

• Hands on experience across Application Security or secure software development
• A good understanding of how modern applications are designed and built
• Development experience with technologies such as Node.js, JavaScript or similar, ideally with front end development exposure
• Experience with API security, threat modelling and vulnerability management
• Exposure to SAST, DAST, WAF and other application security tooling
• Understanding of secure SDLC, DevSecOps and secure coding principles
• Ability to influence developers and engineering teams without creating unnecessary roadblocks
• Strong communication skills and a practical, consulting style approach
• Curiosity, initiative and a genuine interest in continuing to develop technically

Why Join?

• Work alongside highly regarded security specialists and practitioners
• Learn from experienced application security and offensive security professionals, including practitioners who have recently presented at Black Hat and DEF CON
• Strong mentoring and professional development opportunities
• Significant autonomy and ownership
• Exposure to advanced security tools and techniques
• Supportive and collaborative team environment
• Clear career pathway towards Application Security Architecture
• Opportunity to make a genuine impact across both engineering and security

Salary & Benefits

• $200k to $220k package inclusive of super, with some flexibility
• Permanent opportunity
• Melbourne CBD location
• Hybrid working, 2 to 3 days in the office
• Professional development and learning opportunities
• Strong long term career growth potential, including the opportunity to progress towards an Application Security Architect role

Australian Citizenship or Permanent Residency is preferred.

Peoplebank and Leaders IT are committed to creating a diverse and inclusive workplace where everyone belongs. We welcome applications from people of all backgrounds, identities, and experiences. If you need adjustments to the recruitment process due to your circumstances, please let us know—we’re here to support you.