Manager, Application Security

Qantas; Sydney; On-site; AUD 180,000 - 230,000; Full time

Benefits offered by this job

We love to travel discounts

Flexible leave options

Rewards program

Wellbeing programs

Job summary

Qantas is seeking a hands-on Manager, Application Security to strengthen the Group’s cyber posture. You will guide engineering teams in secure software delivery, lead SSDLC activities, threat modelling, and implement secure-by-design and DevSecOps across multiple brands.

You’ll influence without direct authority, build credibility with developers and product teams, and drive timely remediation while balancing delivery priorities in a large enterprise.

Qualifications

• 5+ years’ experience across application security, software engineering, cloud engineering or a related cyber security discipline.
• Hands-on experience securing software applications within large complex environments with SSDLC, secure-by-design and DevSecOps.
• Deep understanding of CI/CD pipelines and integrating security into developer workflows.
• Experience with tools like SCA, SAST, DAST and secrets detection.

Responsibilities

• Lead application security reviews and threat modelling activities.
• Assess vulnerabilities and drive remediation with engineering teams.
• Champion secure-by-design and DevSecOps practices across the Group.
• Influence without direct authority and translate risks into practical solutions.

Skills

Application security

Threat modelling

CI/CD integration

SAST/DAST

Cloud security AWS

Security tooling

Influencing others

Tools

GitHub Advanced Security

CrowdStrike

Qualys

Job description

• Parent Business Function: Digital, IT & Analytics
• Time Type: Full time
• Worker Sub-Type: Permanent

Company Description

Founded in the Queensland outback in 1920, Qantas has grown to be Australia’s largest regional, domestic, and international airline. Qantas has a range of subsidiary businesses that support the overall operations of the Group. The Qantas Group’s main business is the transportation of customers and freight using two complementary airline brands — Qantas and Jetstar — operating regional, domestic, and international services.

Job Description

• Challenge yourself in a hands-on application security leadership role across the Qantas Group
• Influence engineering teams to embed secure-by-design practices, DevSecOps capability and security tooling
• 2 x Permanent opportunities based at our Mascot Campus

At Qantas, we represent Australia to the world. Our diverse country is known for its unique spirit, mateship, and a can-do attitude. Together we’re strong and resilient, and we work hard to make sure we’re always at our best.

Qantas Loyalty is a high performing business and has a history of launching exciting new brands and services that make a difference to its millions of Frequent Flyer and Business Rewards members. Qantas Frequent Flyer and Qantas Business Rewards remain at the core of the program, while the business has evolved to include a number of new ventures and other businesses such as Qantas Marketplace, Qantas Wine, Qantas Money, Qantas Insurance and Qantas Hotels & Holidays.

As the Manager, Application Security, you will play a critical role in strengthening the Qantas Group’s cyber security posture by helping our engineering teams build and deliver secure software. Acting as a trusted technical advisor across Cyber, Technology and the broader business, you will lead the day-to-day delivery of our Secure Software Development Lifecycle program and champion secure-by-design and DevSecOps practices across the Group. This hands-on role will see you lead application security reviews, threat-modelling activities, assess vulnerabilities, build and develop new and improved ways of working, evaluate new tools and provide technical leadership to all layers of business.

Your ability to influence without direct authority will be central to your success. You will build credibility and trusted relationships with software engineers, developers, architects, product teams and technology leaders, translating complex security risks into clear, practical recommendations. Through an approachable and solutions-focused style, you will constructively challenge established ways of working, encourage the adoption of new security practices and drive timely vulnerability remediation, while balancing cyber protection with competing technology and delivery priorities.

You’ll have –

• 5+ years’ experience across application security, software engineering, cloud engineering or a related cyber security discipline
• Hands-on experience securing software applications within large complex environments, supported by strong knowledge of SSDLC, secure-by-design and DevSecOps practices
• Deep understanding of CI/CD pipelines and integrating application security capabilities such as SAST, DAST, software composition analysis and secrets detection into developer workflows
• Experience with application security and engineering technologies, ideally including tools like GitHub Advanced Security, CrowdStrike and Qualys
• Strong AWS and cloud security knowledge, with an understanding of application security frameworks and standards including OWASP, NIST and CIS
• Experience leading security reviews, threat modelling and the assessment, prioritisation and remediation of application vulnerabilities
• Demonstrated ability to influence without direct authority, build credibility with engineering teams and translate complex security risks into practical solutions that balance protection and delivery priorities

Why Qantas?

You’ll join a team where creativity and passion are encouraged. Our people come together to allow us to dream big and deliver successfully.

There are many different opportunities across our team, which means you’ll be able to grow both personally and professionally at Qantas. Your development is a priority for us – so that you can maintain the high standards our customers have come to expect and can continue to develop over time. You’ll be supported from day 1 with on the job training and coaching as well as our formal training opportunities. While you may start in this role, we’ve got a great track record of supporting our people to take their career in so many different directions, the destinations are endless.

The Qantas employee benefits program offers amazing benefits that extend well beyond travel.

• We love to travel: Enjoy heavily discounted air travel within Australia and across the globe, both for you and your family and friends, as well as exclusive deals on accommodation and holidays.
• We have flexible leave options: Make use of leave and flexible working opportunities including up to 18 weeks paid parental leave and additional purchased leave options.
• We’ll give you access to thousands of rewards: Through our partnerships we can offer you discounts across shopping, food and wine, insurance, health and wellbeing, leisure and entertainment.You can also take advantage of our salary packaging program including motor vehicles, eligible portable electronic devices and professional memberships.
• We’ll support your wellbeing: Whether it’s learning to better support your own and others’ mental health, our interactive wellbeing app or your very own tailored nutrition plan.

Qantas is an equal opportunity employer committed to providing a working environment that embraces and values diversity and inclusion. If you have any support or access requirements, we encourage you to advise us at time of application.

Applications close: Tuesday, 10th of November 2026