Application Security Manager

TheDriveGroup; Melbourne; Hybrid; AUD 150,000 - 190,000; Full time

Job summary

TheDriveGroup in Australia is seeking an Application Security Manager to build and lead a new AppSec capability across Melbourne or Sydney. You will own security strategy, standards and secure-by-design practices, aligning with Software Engineering and Cyber Security teams to mature secure development.

You will manage a small team of 4, embed DevSecOps, run threat modelling and security testing, and engage senior stakeholders to drive long-term AppSec goals.

Qualifications

• Proven experience leading Application Security in complex enterprise environments.
• Strong understanding of secure SDLC, DevSecOps and architecture.
• Experience with OWASP, threat modelling and security testing.
• Ability to translate security risks into practical business solutions.

Responsibilities

• Lead and develop a team of 4 security professionals.
• Define Application Security standards, controls and secure design patterns.
• Embed DevSecOps and secure-by-design practices into software development.
• Overseeing threat modelling, security architecture reviews and application security testing.
• Drive vulnerability management, remediation and security risk assessments.
• Work with Engineering and Architecture teams to integrate security into development pipelines.
• Influence senior stakeholders and shape the organisation's long-term AppSec strategy.

Skills

AppSec leadership

DevSecOps

Threat modelling

Vulnerability mgmt

Security testing

Security architecture

Stakeholder engagement

Team mentoring

Job description

Application Security Manager | Australia Wide - Melbourne or Sydney preferred

A rare opportunity to build an Application Security capability from the ground up.

We're partnering with a large Australian organisation that's investing in its software development and security capabilities.

They're looking for an experienced Application Security Manager to lead a small team of 4 and shape how security is embedded into the software development lifecycle.

This is a newly created, greenfield opportunity, offering genuine ownership over AppSec strategy, technical standards and secure-by-design practices.

The Opportunity

You'll work closely with Software Engineering, Architecture and Cyber Security teams to establish and mature the organisation's Application Security capability.

Your responsibilities will include:

• Leading and developing a team of 4 security professionals
• Defining Application Security standards, controls and secure design patterns
• Embedding DevSecOps and secure-by-design practices into software development
• Overseeing threat modelling, security architecture reviews and application security testing
• Driving vulnerability management, remediation and security risk assessments
• Working with Engineering and Architecture teams to integrate security into development pipelines
• Influencing senior stakeholders and shaping the organisation's long-term AppSec strategy

You'll ideally have:

• Strong experience in Application Security leadership within complex enterprise environments
• A solid technical understanding of secure software development, DevSecOps and application security architecture
• Experience with OWASP, threat modelling, vulnerability management and security testing
• Previous experience leading or mentoring technical security teams
• The ability to translate technical security risks into practical business solutions
• Strong stakeholder engagement skills and a collaborative leadership style

We're particularly interested in people who enjoy building capabilities, improving processes and influencing how engineering teams approach security.

What's On Offer?

• Location: Sydney or Melbourne preferred - remote within Australia considered
• Environment: Newly created role with significant scope to shape the AppSec capability
• Eligibility: Australian Citizenship or Permanent Residency required. Security clearance advantageous.

Interested?

If you're an Application Security leader who wants the opportunity to build something rather than simply maintain what's already there, we'd love to hear from you.

If you have any questions about this role or others we have available, you can email Hayley directly via [e-mail]

TheDriveGroup is 100% committed to improving meaningful diversity in the technology industry. We partner with clients who embrace diversity and seek candidates across all backgrounds, abilities, genders, sexualities, cultures and faiths.

If you have the right skills and attitude, we would love to hear from you!