Application Security Specialist - 18-Month Contract

REST Industry Super; Sydney; Hybrid; AUD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid working

5 Rest Days

22 weeks parental leave

Continued super contributions during/–

Learning & development

Income protection insurance

Additional leave

Rest Excellence Awards

Job summary

REST Industry Super is seeking an Application Security Analyst to strengthen security across applications, APIs and software delivery. The role partners with engineering, architecture and product teams to scale secure outcomes in a hybrid Sydney/Melbourne environment.

You will drive secure-by-design practices, embed security into the development lifecycle, and guide teams with pragmatic risk-based recommendations.

Qualifications

• Experience in application security within a complex enterprise environment.
• Experience conducting app security assessments across web apps, APIs and cloud-native environments.
• Strong knowledge of OWASP Top 10 and secure SDLC practices.
• Hands-on with app security tools (SAST/DAST/SCA, API testing, secrets detection).
• Familiarity with security frameworks (OWASP ASVS/SAMM, NIST CSF, APRA CPS 234).

Responsibilities

• Lead application security assessments across web apps, APIs and cloud-based services.
• Embed security into solution design through threat modelling and secure-by-design practices.
• Manage findings with risk-based remediation guidance and minimize false positives.
• Improve security tooling like SAST/DAST/SCA and API security testing.
• Promote secure SDLC and DevSecOps in CI/CD pipelines.
• Coordinate penetration testing activities and oversee remediation outcomes.
• Develop and maintain app security standards and guardrails.
• Provide security guidance to developers and engineers.
• Support security incidents related to application vulnerabilities or insecure design.
• Deliver security metrics and reporting on risk and remediation performance.

Skills

Application security

DevSecOps

Threat modelling

Vulnerability management

CI/CD pipelines

Security guidance

Education

Bachelor's degree in CS/IT or related field

Tools

SAST

DAST

SCA

API security testing

Secrets detection

OWASP ASVS

Job description

REST Industry Super is seeking an Application Security Analyst to strengthen security across applications, APIs and software delivery. The role partners with engineering, architecture and product teams to scale secure outcomes in a hybrid Sydney/Melbourne environment.

You will drive secure-by-design practices, embed security into the development lifecycle, and guide teams with pragmatic risk-based recommendations.