Lead Secure Code-Scanning Engineer

Whizdom; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

Whizdom is seeking a Senior Application Security Engineer to lead the implementation and adoption of secure code-scanning capabilities across a complex software development environment.

You will integrate automated security testing into source-control systems and CI/CD pipelines, partnering with development, DevOps and security teams to establish remediation workflows and governance. You will mentor teams and promote secure coding practices.

Qualifications

• Demonstrated experience implementing Application Security or Secure Code Scanning solutions within large enterprise environments.
• Strong hands-on experience with one or more platforms such as Snyk, Fortify, Checkmarx or Veracode.
• Strong knowledge of Static Application Security Testing (SAST) and vulnerability-management practices.
• Experience integrating security tools with GitHub, GitLab and CI/CD pipelines.

Responsibilities

• Lead the implementation and onboarding of Secure Code Scanning platforms across complex software environments.
• Integrate security scanning with source-control systems and CI/CD pipelines.
• Establish scanning strategies, remediation workflows, quality gates and vulnerability-management processes.
• Mentor development teams and promote secure coding and DevSecOps best practices.

Skills

Application Security

SAST

DevSecOps

Secure SDLC

Security tooling

Stakeholder engagement

Tools

Snyk

Fortify

Checkmarx

Veracode

GitHub

GitLab

CI/CD pipelines

Job description

Whizdom is seeking a Senior Application Security Engineer to lead the implementation and adoption of secure code-scanning capabilities across a complex software development environment.

You will integrate automated security testing into source-control systems and CI/CD pipelines, partnering with development, DevOps and security teams to establish remediation workflows and governance. You will mentor teams and promote secure coding practices.