Application Security Engineer: Secure SDLC & Cloud

Universal Music Australia Pty Limited; Sydney; Sur place; AUD 110 000 - 160 000; Plein temps

Résumé du poste

Universal Music Australia Pty Limited is seeking a Tech Security Engineer to enhance the security posture of their applications and platforms. This role involves application security assessments and partnering with engineering teams to remediate risks throughout the software development lifecycle.

The ideal candidate has 3–6 years of experience in Security Engineering and strong knowledge of application security concepts like OWASP Top 10. Familiarity with cloud environments such as AWS and hands-on experience with security testing tools are essential.

Qualifications

• 3–6 years of experience in Security Engineering, Application Security, or Software Engineering.
• Strong understanding of application security concepts, including OWASP Top 10.
• Hands-on experience with security testing tools such as Burp Suite and OWASP ZAP.

Responsabilités

• Perform application security reviews including design reviews and threat modeling.
• Conduct static and dynamic security testing (SAST/DAST) across web applications.
• Partner with engineering teams to remediate vulnerabilities.

Connaissances

Application security concepts

Web technologies and APIs

Security testing tools

Cloud environments (AWS, Azure, GCP)

Analytical and problem-solving skills

Formation

3–6 years of experience in Security Engineering

Outils

Burp Suite

OWASP ZAP

Python

JavaScript

Description du poste

Universal Music Australia Pty Limited is seeking a Tech Security Engineer to enhance the security posture of their applications and platforms. This role involves application security assessments and partnering with engineering teams to remediate risks throughout the software development lifecycle.

The ideal candidate has 3–6 years of experience in Security Engineering and strong knowledge of application security concepts like OWASP Top 10. Familiarity with cloud environments such as AWS and hands-on experience with security testing tools are essential.