Defence App Security Engineer | DevSecOps & SBOM | NV1

Brownstone Consulting; Canberra; On-site; AUD 110,000 - 150,000; Full time

Job summary

Brownstone Consulting is seeking an Application Security Engineer to strengthen the security of a mission-critical Defence web application. The role sits in Canberra on site, with current NV1 clearance or a recently lapsed clearance that can be reactivated, and Australian citizenship is required.

You’ll remediate SBOM and vulnerability findings, review security architecture, and support accreditation activities within a small, stable team delivering Defence-grade software on a modern stack.

Qualifications

• Application security experience.
• Vulnerability assessment and remediation.
• Secure SDLC and DevSecOps.
• Knowledge of the ISM and Defence accreditation processes.
• Experience securing Angular or other modern web applications.

Responsibilities

• Remediate SBOM and vulnerability findings.
• Review application security architecture.
• Support security assurance and accreditation activities.

Skills

Application security

Vulnerability remediation

Secure SDLC

Defence accreditation

Web app security

Job description

Brownstone Consulting is seeking an Application Security Engineer to strengthen the security of a mission-critical Defence web application. The role sits in Canberra on site, with current NV1 clearance or a recently lapsed clearance that can be reactivated, and Australian citizenship is required.

You’ll remediate SBOM and vulnerability findings, review security architecture, and support accreditation activities within a small, stable team delivering Defence-grade software on a modern stack.