Application Security Lead - DevSecOps & Secure SDLC

Qantas; Sydney; On-site; AUD 180,000 - 230,000; Full time

Benefits offered by this job

We love to travel discounts

Flexible leave options

Rewards program

Wellbeing programs

Job summary

Qantas is seeking a hands-on Manager, Application Security to strengthen the Group’s cyber posture. You will guide engineering teams in secure software delivery, lead SSDLC activities, threat modelling, and implement secure-by-design and DevSecOps across multiple brands.

You’ll influence without direct authority, build credibility with developers and product teams, and drive timely remediation while balancing delivery priorities in a large enterprise.

Qualifications

• 5+ years’ experience across application security, software engineering, cloud engineering or a related cyber security discipline.
• Hands-on experience securing software applications within large complex environments with SSDLC, secure-by-design and DevSecOps.
• Deep understanding of CI/CD pipelines and integrating security into developer workflows.
• Experience with tools like SCA, SAST, DAST and secrets detection.

Responsibilities

• Lead application security reviews and threat modelling activities.
• Assess vulnerabilities and drive remediation with engineering teams.
• Champion secure-by-design and DevSecOps practices across the Group.
• Influence without direct authority and translate risks into practical solutions.

Skills

Application security

Threat modelling

CI/CD integration

SAST/DAST

Cloud security AWS

Security tooling

Influencing others

Tools

GitHub Advanced Security

CrowdStrike

Qualys

Job description

Qantas is seeking a hands-on Manager, Application Security to strengthen the Group’s cyber posture. You will guide engineering teams in secure software delivery, lead SSDLC activities, threat modelling, and implement secure-by-design and DevSecOps across multiple brands.

You’ll influence without direct authority, build credibility with developers and product teams, and drive timely remediation while balancing delivery priorities in a large enterprise.