Application Security Leader: Greenfield Build (Hybrid)

Decipher Bureau; Melbourne; On-site; AUD 150,000 - 210,000; Full time

Job summary

Decipher Bureau in Melbourne is seeking an Application Security Manager to build a brand-new AppSec function and shape how security is integrated from the ground up. You will lead a small team including a Cyber Security Architect and Application Security Engineers, driving secure design and threat modelling across projects.

This role offers a chance to establish a capability within a large organisation, with a focus on advisory work, governance and meaningful delivery across critical systems.

Qualifications

• Hands-on AppSec expertise spanning design reviews, threat modelling and remediation.
• Builder mindset; comfortable tackling ambiguity and creating new capability.
• Strong communication to influence technical and business stakeholders.
• Experience embedding DevSecOps into delivery pipelines.

Responsibilities

• Build the AppSec function from ground up, establishing standards, patterns and assurance processes.
• Own security architecture input and secure-by-design practices across delivery.
• Embed DevSecOps into delivery pipelines where feasible.
• Lead risk assessments, design reviews, threat modelling and remediation oversight.
• Collaborate with delivery teams, risk, tech, and partners to raise security posture.
• Report on application risk, gaps and remediation progress to leadership.

Skills

Application security

Threat modelling

Secure design reviews

Security testing

Leadership

Stakeholder influence

Communication

Job description

Decipher Bureau in Melbourne is seeking an Application Security Manager to build a brand-new AppSec function and shape how security is integrated from the ground up. You will lead a small team including a Cyber Security Architect and Application Security Engineers, driving secure design and threat modelling across projects.

This role offers a chance to establish a capability within a large organisation, with a focus on advisory work, governance and meaningful delivery across critical systems.