Application Security Engineer - Sydney

Ayan Infotech; Sydney; On-site; AUD 130,000 - 190,000; Full time

Job summary

AYAN InfoTech in Sydney is seeking an experienced Application Security Engineer to lead secure code scanning initiatives and integrate SAST tools across the SDLC. You will work with CI/CD pipelines and collaborate with development, DevOps, and security teams to enforce security policies and remediation workflows.

You will mentor teams on secure coding practices, establish governance, and ensure long-term platform adoption in a mature enterprise environment.

Qualifications

• Extensive experience implementing Secure Code Scanning in large enterprises.
• Strong knowledge of SAST and secure SDLC practices.
• Experience integrating scanning tools with GitHub/GitLab and CI/CD.
• Proven ability to define remediation workflows and governance.

Responsibilities

• Lead the implementation and onboarding of Secure Code Scanning platforms across the software development lifecycle.
• Design integrations with GitHub, GitLab and CI/CD pipelines to enable automated security scanning and policy enforcement.
• Collaborate with development, DevOps, and security teams to define scanning strategies and secure coding controls.
• Provide hands-on support during implementation, testing, rollout, and post-go-live activities.

Skills

Secure Coding

Secure Code Scanning

DevSecOps

Vulnerability Management

Tools

Snyk

Fortify

Checkmarx

Veracode

GitHub

GitLab

CI/CD Pipelines

Job description

AYAN InfoTech is looking for Application Security Engineer to join an exciting project based in Sydney. The role offers you the opportunity to contribute towards an extremely well structured and mature environment, working on sophisticated enhancement projects.
Role: Application Security Engineer
Location: Sydney
Contract Duration: 6 Months with high possible extensions
Experience: 7+ Years
Job description: Senior Application Security Engineer - Secure Code Scanning Implementation

• Lead the implementation and onboarding of Secure Code Scanning platforms such as Snyk, Fortify, Checkmarx, or Veracode across the software development lifecycle.
• Design and implement integrations with GitHub, GitLab and CI/CD pipelines to enable automated security scanning and policy enforcement.
• Collaborate with development, DevOps, and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.
• Proactively identify implementation challenges, integration dependencies, developer adoption issues, and performance impacts, and provide practical solutions to mitigate risks.
• Establish vulnerability management processes, including triage, risk prioritization, exception handling, SLA definition, and remediation tracking.
• Develop technical standards, deployment procedures, operational runbooks, and governance processes to support long-term platform adoption.
• Provide hands-on support during implementation, testing, rollout, and post-go-live stabilization activities while mentoring development teams on secure coding practices.
• Demonstrated experience implementing similar Application Security and Secure Coding solutions in large enterprise environments, with strong knowledge of SAST, vulnerability management, SDLC, and DevSecOps practices.

Contact: 61-[phone] for more details.

Please note we will be able to contact only shortlisted candidates for this role. We thank you in advance for your interest.