Manager, Application Security

Qantas Airways; Sydney; On-site; AUD 140,000 - 200,000; Full time

Benefits offered by this job

Employee benefits program

Job summary

Qantas Airways is seeking a hands-on Manager, Application Security to strengthen the Group's cyber posture. You will influence engineering teams to embed secure-by-design practices and DevSecOps capabilities, leading reviews, threat modelling and vulnerability remediation across the portfolio.

You will work closely with software engineers, architects, product teams and technology leadership to translate risks into practical, timely security solutions while balancing delivery priorities.

Qualifications

• 5+ years’ experience across application security, software engineering, cloud engineering or related cyber security.
• Hands-on experience securing software applications within large complex environments with SSDLC, secure-by-design and DevSecOps.
• Deep understanding of CI/CD pipelines and integrating SAST, DAST, software composition analysis and secrets detection into developer workflows.
• Experience with GitHub Advanced Security, CrowdStrike and Qualys.
• Strong AWS and cloud security knowledge, with familiarity with OWASP, NIST and CIS.
• Experience leading security reviews, threat modelling and remediation of vulnerabilities.
• Ability to influence without direct authority and translate risks into practical solutions.

Responsibilities

• Lead application security reviews and threat modelling activities.
• Assess vulnerabilities and drive remediation with prioritisation.
• Champion Secure SDLC, secure-by-design and DevSecOps practices.
• Provide technical leadership across the Group to engineers, architects and product teams.
• Evaluate new security tools and integrate them into pipelines.

Skills

Application security

DevSecOps

SAST

DAST

GitHub Advanced Security

CrowdStrike

Qualys

AWS security

Threat modelling

Influence without authority

Tools

GitHub Advanced Security

CrowdStrike

Qualys

Job description

• Challenge yourself in a hands-on application security leadership role across the Qantas Group
• Influence engineering teams to embed secure-by-design practices, DevSecOps capability and security tooling
• 2 x Permanent opportunities based at our Mascot Campus

At Qantas, we represent Australia to the world. Our diverse country is known for its unique spirit, mateship, and a can-do attitude. Together we’re strong and resilient, and we work hard to make sure we’re always at our best.

Qantas Loyalty is a high performing business and has a history of launching exciting new brands and services that make a difference to its millions of Frequent Flyer and Business Rewards members. Qantas Frequent Flyer and Qantas Business Rewards remain at the core of the program, while the business has evolved to include a number of new ventures and other businesses such as Qantas Marketplace, Qantas Wine, Qantas Money, Qantas Insurance and Qantas Hotels & Holidays.

As the Manager, Application Security, you will play a critical role in strengthening the Qantas Group’s cyber security posture by helping our engineering teams build and deliver secure software. Acting as a trusted technical advisor across Cyber, Technology and the broader business, you will lead the day-to-day delivery of our Secure Software Development Lifecycle program and champion secure-by-design and DevSecOps practices across the Group. This hands-on role will see you lead application security reviews, threat-modelling activities, assess vulnerabilities, build and develop new and improved ways of working, evaluate new tools and provide technical leadership to all layers of business.

Your ability to influence without direct authority will be central to your success. You will build credibility and trusted relationships with software engineers, developers, architects, product teams and technology leaders, translating complex security risks into clear, practical recommendations. Through an approachable and solutions-focused style, you will constructively challenge established ways of working, encourage the adoption of new security practices and drive timely vulnerability remediation, while balancing cyber protection with competing technology and delivery priorities.

You’ll have –

• 5+ years’ experience across application security, software engineering, cloud engineering or a related cyber security discipline
• Hands-on experience securing software applications within large complex environments, supported by strong knowledge of SSDLC, secure-by-design and DevSecOps practices
• Deep understanding of CI/CD pipelines and integrating application security capabilities such as SAST, DAST, software composition analysis and secrets detection into developer workflows
• Experience with application security and engineering technologies, ideally including tools like GitHub Advanced Security, CrowdStrike and Qualys
• Strong AWS and cloud security knowledge, with an understanding of application security frameworks and standards including OWASP, NIST and CIS
• Experience leading security reviews, threat modelling and the assessment, prioritisation and remediation of application vulnerabilities
• Demonstrated ability to influence without direct authority, build credibility with engineering teams and translate complex security risks into practical solutions that balance protection and delivery priorities

Why Qantas?

You’ll join a team where creativity and passion are encouraged. Our people come together to allow us to dream big and deliver successfully.

There are many different opportunities across our team, which means you’ll be able to grow both personally and professionally at Qantas. Your development is a priority for us – so that you can maintain the high standards our customers have come to expect and can continue to develop over time. You’ll be supported from day 1 with on the job training and coaching as well as our formal training opportunities. While you may start in this role, we’ve got a great track record of supporting our people to take their career in so many different directions, the destinations are endless.

The Qantas employee benefits program offers amazing benefits that extend well beyond travel.

• We love to travel: Enjoy heavily discounted air travel within Australia and across the globe, both for you and your family and friends, as well as exclusive deals on accommodation and holidays.
• We have flexible leave options: Make use of leave and flexible working opportunities including up to 18 weeks paid parental leave and additional purchased leave options.
• We’ll give you access to thousands of rewards: Through our partnerships we can offer you discounts across shopping, food and wine, insurance, health and wellbeing, leisure and entertainment.You can also take advantage of our salary packaging program including motor vehicles, eligible portable electronic devices and professional memberships.
• We’ll support your wellbeing: Whether it’s learning to better support your own and others’ mental health, our interactive wellbeing app or your very own tailored nutrition plan.

Qantas is an equal opportunity employer committed to providing a working environment that embraces and values diversity and inclusion. If you have any support or access requirements, we encourage you to advise us at time of application.

Applications close: Tuesday, 10th of November 2026