Application Security Specialist

Australia Post; City of Yarra; On-site; AUD 110,000 - 170,000; Full time

Benefits offered by this job

Flexible working

Hybrid work arrangement

Home-office two days per week

Job summary

Australia Post is seeking an experienced Application Security Specialist to protect our digital ecosystem by identifying, testing, and validating security risks across web apps, APIs, and modern tech platforms. You’ll work with engineering teams to embed security throughout the SDLC and drive improvements.

You’ll lead testing activities, uplift secure practices, and drive tooling adoption (SAST, SCA, DAST, CI/CD). The role leverages AI-assisted testing while staying compliant and human-led.

Qualifications

• Strong hands-on penetration testing experience across web applications and APIs.
• Experience in Application Security, Security Engineering or DevSecOps, including SAST, SCA and CI/CD security integration.
• Exposure to cloud environments (AWS, Azure and/or GCP), threat modelling, secure solution design and AI/LLM security concepts and testing approaches.

Responsibilities

• Lead penetration testing and security validation activities across web applications, APIs and modern technology environments.
• Partner with engineering teams to uplift secure SDLC practices through threat modelling, security guidance and practical remediation support.
• Drive the adoption and optimisation of application security tooling, including SAST, SCA, DAST and CI/CD security controls.
• Leverage AI-assisted security testing techniques and tooling, ensuring all testing activities remain authorised, governed and human-led.

Skills

Penetration testing

Web apps

APIs

Threat modelling

CI/CD security

SAST

SCA

DAST

AI security

Tools

SAST tooling

SCA tooling

DAST tooling

CI/CD security tooling

Job description

Press space or enter keys to toggle section visibility

Name

Penetration Tester / Application Security Specialist

Site / Location

Ref #

12387216

Entity

Australia Post

Opening Date

26-Aug-2026

Suburb

Work Type

Permanent Full Time

Description & Requirements

Press space or enter keys to toggle section visibility

Working in tech at Australia Post is where innovation and problem solving meets great people and agile working. You’ll work with bright people on building and maintaining products and services that you and every other Australian get to benefit from every day. Whether you’re working from our modern office or your one at home, you’ll be part of a culture of collaboration and connection, making long-lasting impact right across Australia.

About the opportunity

As our Application Security Specialist, you’ll play a critical role in protecting Australia Post’s digital ecosystem by identifying, testing and validating security risks across web applications, APIs and modern technology platforms. Y ou'll work closely with engineering teams, architects, product owners and cyber specialists to embed security throughout the software development lifecycle and help teams deliver innovative solutions securely and at pace. This role is ideal for a hands‑on penetration tester who enjoys uncovering vulnerabilities, influencing outcomes and partnering with teams to drive meaningful security improvements.

You’ll also

• Lead penetration testing and security validation activities across web applications, APIs and modern technology environments.
• Partner with engineering teams to uplift secure SDLC practices through threat modelling, security guidance and practical remediation support.
• Drive the adoption and optimisation of application security tooling, including SAST, SCA, DAST and CI/CD security controls.
• Leverage AI-assisted security testing techniques and tooling, ensuring all testing activities remain authorised, governed and human‑led.

About you

You’re a curious, collaborative and technically strong security professional who enjoys getting hands‑on with offensive security activities while helping others build secure solutions. You can confidently communicate complex technical findings to a broad range of stakeholders and influence security outcomes through strong relationships, practical advice and a risk‑based approach. You enjoy solving complex problems, continuously learning and working across diverse technologies at enterprise scale.

You’ll also need

• Strong hands‑on penetration testing experience across web applications and APIs, including scoping, execution, reporting and remediation verification.
• Experience in Application Security, Security Engineering or DevSecOps, including SAST, SCA and CI/CD security integration.
• Exposure to cloud environments (AWS, Azure and/or GCP), threat modelling, secure solution design and AI/LLM security concepts and testing approaches.

What else is in it for you?

• Join one of Australia’s largest and most complex technology environments, protecting digital, cloud, mobile and operational technology platforms used by millions of Australians
• Work alongside a highly skilled, diverse and collaborative Cyber Defence team where knowledge sharing and continuous learning are part of everyday work
• Gain exposure to a broad range of technologies, security tools and emerging threats, creating endless opportunities for technical growth and development
• Bring your whole self to work every day and be met by a welcoming bunch of people who respect and support you
• Flexible and hybrid working arrangements, like the opportunity to work from home two days per week
• Opportunities for growth and development through formal programs or mentorship
• Exclusive team member discounts and offers for more cash in your pocket, evolving policies for flexible working, leave types and access to health and wellbeing resources

All walks, one route

It takes a lot of us to deliver for every Australian – and it’s important to us that our people behind the parcels reflect the people receiving them. We come from all walks. Different backgrounds, different ages, different genders, different sexualities and different abilities, but we all believe in the same purpose.

We welcome people all ages, genders and backgrounds – including Aboriginal and Torres Strait Islander peoples, people with disability, LGBTQIA+ communities, and refugees. We’re a Disability Confident Recruiter, committed to making our hiring process and workplace inclusive and barrier‑free. We’re also working hard to remove bias and build a gender‑equitable experience for everyone who joins us. If you’ve got questions about accessibility, reach out to our Diversity & Inclusion team at [e-mail] or on 03 8737 9415.

See and hear what life is like in digital tech: