Principal AppSec Architect - Lead Secure SDLC & Tooling

Rio Tinto; Brisbane; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Comprehensive medical benefits

Annual incentive program

Company provided insurance

Salary packaging options

Career development support

Inclusive work environment

Job summary

Rio Tinto is seeking a Principal Adviser - Cyber Security Architecture (AppSec) to lead the Application Security domain within Cyber Security. This role owns the strategy, standards, architecture and roadmap for secure software development and application security services across Rio Tinto.

You will collaborate with Enterprise Architecture, software engineering and platform teams to embed security into how applications are designed, built and deployed, turning requirements into practical

Qualifications

• Experience leading application security at an enterprise level.
• Proven ability to set security standards, patterns and guidance across large teams.
• Hands-on ownership of AppSec capabilities including tooling and integrations.

Responsibilities

• Own the enterprise Application Security strategy, standards, reference architectures and service roadmap.
• Lead Secure SDLC, DevSecOps, threat modelling and secure application development practices.
• Embed security requirements into engineering standards, delivery processes and CI/CD pipelines.
• Own and support AppSec tooling and services (Snyk with GitHub, Azure DevOps, Artifactory) and drive adoption.
• Guide teams in identifying, prioritising and remediating vulnerabilities across applications and dependencies.
• Define reusable security patterns and requirements for apps, APIs, cloud-native workloads, containers, secrets, and AI-enabled solutions.
• Review designs for higher-risk initiatives and provide clear security guidance to projects.
• Build relationships across Cyber, IS&T and development communities; mentor architects to lift AppSec capability.

Skills

Application Security

Secure SDLC

DevSecOps

Threat Modelling

Vulnerability Management

Security Architecture

Education

Cyber security or information security degree/certifications

Tools

Snyk

GitHub

Azure DevOps

Artifactory

Job description

Rio Tinto is seeking a Principal Adviser - Cyber Security Architecture (AppSec) to lead the Application Security domain within Cyber Security. This role owns the strategy, standards, architecture and roadmap for secure software development and application security services across Rio Tinto.

You will collaborate with Enterprise Architecture, software engineering and platform teams to embed security into how applications are designed, built and deployed, turning requirements into practical