Penetration Tester / Application Security Specialist

Australia Post; City of Melbourne; Hybrid; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible/hybrid working

Exclusive team member discounts

Health and wellbeing resources

Mentorship programs

Job summary

Australia Post is seeking an Application Security Specialist to protect its digital ecosystem by identifying, testing and validating security risks across web apps, APIs and modern platforms. You’ll work closely with engineering teams, architects and cyber specialists to embed security throughout the software development lifecycle and help teams deliver innovative solutions securely and at pace.

You’ll also lead hands-on offensive security activities, drive threat modelling, and uplift secure

Qualifications

• Strong hands-on penetration testing across web apps and APIs.
• Experience in Application Security, Security Engineering or DevSecOps.
• Exposure to cloud environments (AWS, Azure and/or GCP), threat modelling, secure solution design and AI/LLM security concepts and testing approaches.

Responsibilities

• Lead penetration testing and security validation across web applications and APIs.
• Partner with engineering teams to uplift secure SDLC practices through threat modelling, security guidance and remediation support.
• Drive the adoption and optimisation of application security tooling, including SAST, SCA, CI/CD security controls.
• Leverage AI-assisted security testing techniques and tooling, ensuring testing remains authorised, governed and human-led.

Skills

Penetration testing

Application security

Threat modelling

Tools

SAST

SCA

CI/CD security tooling

Job description

Working in tech at Australia Post is where innovation and problem solving meets great people and agile working. You’ll work with bright people on building and maintaining products and services that you and every other Australian get to benefit from every day. Whether you’re working from our modern office or your one at home, you’ll be part of a culture of collaboration and connection, making long-lasting impact right across Australia.

About the opportunity

As our Application Security Specialist, you’ll play a critical role in protecting Australia Post’s digital ecosystem by identifying, testing and validating security risks across web applications, APIs and modern technology platforms. You'll work closely with engineering teams, architects, product owners and cyber specialists to embed security throughout the software development lifecycle and help teams deliver innovative solutions securely and at pace. This role is ideal for a hands-on penetration tester who enjoys uncovering vulnerabilities, influencing outcomes and partnering with teams to drive meaningful security improvements.

You’ll also

• Lead penetration testing and security validation activities across web applications, APIs and modern technology environments.
• Partner with engineering teams to uplift secure SDLC practices through threat modelling, security guidance and practical remediation support.
• Drive the adoption and optimisation of application security tooling, including SAST, SCA, DAST and CI/CD security controls.
• Leverage AI-assisted security testing techniques and tooling, ensuring all testing activities remain authorised, governed and human-led.

About you

You’re a curious, collaborative and technically strong security professional who enjoys getting hands-on with offensive security activities while helping others build secure solutions. You can confidently communicate complex technical findings to a broad range of stakeholders and influence security outcomes through strong relationships, practical advice and a risk-based approach. You enjoy solving complex problems, continuously learning and working across diverse technologies at enterprise scale.

You’ll also need

• Strong hands-on penetration testing experience across web applications and APIs, including scoping, execution, reporting and remediation verification.
• Experience in Application Security, Security Engineering or DevSecOps, including SAST, SCA and CI/CD security integration.
• Exposure to cloud environments (AWS, Azure and/or GCP), threat modelling, secure solution design and AI/LLM security concepts and testing approaches.

What else is in it for you?

• Join one of Australia’s largest and most complex technology environments, protecting digital, cloud, mobile and operational technology platforms used by millions of Australians
• Work alongside a highly skilled, diverse and collaborative Cyber Defence team where knowledge sharing and continuous learning are part of everyday work
• Gain exposure to a broad range of technologies, security tools and emerging threats, creating endless opportunities for technical growth and development
• Bring your whole self to work every day and be met by a welcoming bunch of people who respect and support you
• Flexible and hybrid working arrangements, like the opportunity to work from home two days per week
• Opportunities for growth and development through formal programs or mentorship
• Exclusive team member discounts and offers for more cash in your pocket, evolving policies for flexible working, leave types and access to health and wellbeing resources

All walks, one route

It takes a lot of us to deliver for every Australian – and it’s important to us that our people behind the parcels reflect the people receiving them. We come from all walks. Different backgrounds, different ages, different genders, different sexualities and different abilities, but we all believe in the same purpose.

We welcome people all ages, genders and backgrounds – including Aboriginal and Torres Strait Islander peoples, people with disability, LGBTQIA+ communities, and refugees. We’re a Disability Confident Recruiter, committed to making our hiring process and workplace inclusive and barrier-free. We’re also working hard to remove bias and build a gender-equitable experience for everyone who joins us. If you’ve got questions about accessibility, reach out to our Diversity & Inclusion team at [e-mail] or on 03 8737 9415.