Remote Security Engineer - Application Security & DevSecOps

Flybuys; Melbourne; Hybrid; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Well-being days

Volunteer leave

Learning & development

Team discounts

Hybrid work policy

New starter kit merchandise

Job summary

Flybuys in Melbourne is seeking a hands-on Security Engineer (Application Security) to blend security into how software is built, deployed and operated across our technology estate. You’ll work with engineering squads in a practical, security-focused partner role within the Cyber Security team, contributing from day one and growing your expertise in cloud security and DevSecOps.

It’s a hands-on role with opportunities to influence vulnerability management, threat modelling and secure coding

Qualifications

• 2–4 years in security engineering, DevSecOps, or related roles with security focus.

Responsibilities

• Implement and maintain security scanning tools in pipelines.
• Tune scanners to reduce false positives and improve feedback.
• Build security gates for fast actionable feedback.
• Maintain security-as-code artefacts across repos.
• Support engineering in remediation of findings.
• Triage vulnerabilities from Wiz, AWS Inspector, Defender, SAST/DAST.
• Correlate findings with asset context and business criticality.
• Track remediation progress within SLAs.
• Contribute to vulnerability reporting and dashboards.
• Identify patterns and recommend systemic fixes.
• Review Infrastructure-as-Code for security misconfigurations.
• Participate in threat modelling and security-focused code reviews.
• Assist in penetration testing coordination.
• Build scripts and lightweight tools to automate tasks.
• Assist with AI/ML-assisted workflows and LLM tooling for security use cases.

Skills

CI/CD pipelines

AWS basics

Application security tools

OWASP Top 10

AI/ML security

Security communication

CNAPP/GitLab

Threat modelling

Tools

GitLab

Container security

API security concepts

IaC scanning

Secrets detection

Job description

Flybuys in Melbourne is seeking a hands-on Security Engineer (Application Security) to blend security into how software is built, deployed and operated across our technology estate. You’ll work with engineering squads in a practical, security-focused partner role within the Cyber Security team, contributing from day one and growing your expertise in cloud security and DevSecOps.

It’s a hands-on role with opportunities to influence vulnerability management, threat modelling and secure coding