Application Security Lead – DevSecOps & Strategy

TheDriveGroup; Melbourne; Híbrido; AUD 150.000 - 190.000; Jornada completa

Descripción de la vacante

TheDriveGroup in Australia is seeking an Application Security Manager to build and lead a new AppSec capability across Melbourne or Sydney. You will own security strategy, standards and secure-by-design practices, aligning with Software Engineering and Cyber Security teams to mature secure development.

You will manage a small team of 4, embed DevSecOps, run threat modelling and security testing, and engage senior stakeholders to drive long-term AppSec goals.

Formación

• Proven experience leading Application Security in complex enterprise environments.
• Strong understanding of secure SDLC, DevSecOps and architecture.
• Experience with OWASP, threat modelling and security testing.
• Ability to translate security risks into practical business solutions.

Responsabilidades

• Lead and develop a team of 4 security professionals.
• Define Application Security standards, controls and secure design patterns.
• Embed DevSecOps and secure-by-design practices into software development.
• Overseeing threat modelling, security architecture reviews and application security testing.
• Drive vulnerability management, remediation and security risk assessments.
• Work with Engineering and Architecture teams to integrate security into development pipelines.
• Influence senior stakeholders and shape the organisation's long-term AppSec strategy.

Conocimientos

AppSec leadership

DevSecOps

Threat modelling

Vulnerability mgmt

Security testing

Security architecture

Stakeholder engagement

Team mentoring

Descripción del empleo

TheDriveGroup in Australia is seeking an Application Security Manager to build and lead a new AppSec capability across Melbourne or Sydney. You will own security strategy, standards and secure-by-design practices, aligning with Software Engineering and Cyber Security teams to mature secure development.

You will manage a small team of 4, embed DevSecOps, run threat modelling and security testing, and engage senior stakeholders to drive long-term AppSec goals.