Lead DevSecOps Engineer - Secure CI/CD Pipelines

TheDriveGroup; Sydney; Hybrid; AUD 176,000 - 230,000; Full time

Job summary

TheDriveGroup is seeking a Senior DevSecOps Engineer for a Sydney-based hybrid, 6-month contract. You will design and implement application security scanning, lead rollouts of SAST, DAST and SCA, and embed automated security testing into development pipelines.

You will work with software and security teams to enhance secure coding practices, reduce false positives, and improve vulnerability triage across a large enterprise.

Qualifications

• Hands-on experience in DevSecOps or Application Security Engineering.
• Experience implementing SAST, DAST and SCA tooling.
• Experience with CI/CD tools: GitHub Actions, GitLab, Jenkins or Azure DevOps.
• Knowledge of OWASP Top 10 and secure development practices.

Responsibilities

• Design, configure and implement enterprise application security scanning tools.
• Lead the rollout of SAST, DAST and SCA capabilities.
• Integrate automated security testing into CI/CD pipelines.
• Establish security quality gates, scanning standards and policies.
• Develop automation using Python, Bash, PowerShell and APIs.
• Improve vulnerability triage processes and reduce false positives.
• Work directly with engineering teams to improve secure coding practices.

Skills

DevSecOps

Application Security

SAST

DAST

SCA tooling

CI/CD

GitHub Actions

GitLab

Jenkins

Azure DevOps

OWASP Top 10

Vulnerability management

Secure development practices

Automation scripting

Tools

Snyk

Checkmarx

SonarQube

Veracode

Fortify

OWASP ZAP

Job description

TheDriveGroup is seeking a Senior DevSecOps Engineer for a Sydney-based hybrid, 6-month contract. You will design and implement application security scanning, lead rollouts of SAST, DAST and SCA, and embed automated security testing into development pipelines.

You will work with software and security teams to enhance secure coding practices, reduce false positives, and improve vulnerability triage across a large enterprise.