Lead Secure Code Scanning Architect

XPT Software; Sydney; On-site; AUD 150,000 - 190,000; Full time

Job summary

XPT Software in Sydney is seeking a Senior Application Security Engineer to lead the implementation of secure code scanning across the software development lifecycle, integrating platforms such as Snyk, Fortify, Checkmarx or Veracode with GitHub, GitLab and CI/CD pipelines.

You will collaborate with development, DevOps and security teams to define scanning strategies, remediation workflows, and governance, provide hands-on support during rollout and post-go-live stabilization, and mentor teams

Qualifications

• Experience implementing application security in large enterprise environments.
• Strong knowledge of SAST, vulnerability management and secure coding practices.
• Familiarity with SDLC and DevSecOps environments.

Responsibilities

• Lead onboarding of Secure Code Scanning platforms like Snyk, Fortify, Checkmarx or Veracode across the SDLC.
• Design integrations with GitHub, GitLab and CI/CD pipelines for automated security scanning.
• Collaborate with development, DevOps and security teams to define scanning strategies and remediation workflows.
• Identify implementation challenges and mitigate risks with practical solutions.
• Establish vulnerability management processes, triage, risk prioritization and remediation tracking.

Skills

Secure Code Scanning

CI/CD

SAST

DevSecOps

Vulnerability management

Tools

Snyk

Fortify

Checkmarx

Veracode

Job description

XPT Software in Sydney is seeking a Senior Application Security Engineer to lead the implementation of secure code scanning across the software development lifecycle, integrating platforms such as Snyk, Fortify, Checkmarx or Veracode with GitHub, GitLab and CI/CD pipelines.

You will collaborate with development, DevOps and security teams to define scanning strategies, remediation workflows, and governance, provide hands-on support during rollout and post-go-live stabilization, and mentor teams