Secure DevSecOps Engineer — CI/CD, AppSec & Policy-as-Code

XPT Software; Sydney; On-site; AUD 140,000 - 180,000; Full time

Job summary

XPT Software is seeking an experienced DevSecOps specialist to design and implement secure CI/CD solutions for the Cybersecurity team. The role requires 6-8 years of DevSecOps, cybersecurity, or platform-engineering experience and hands-on expertise with GitLab CI/CD, Argo CD/GitOps, and SAST tooling.

You will design secure pipelines, reusable security controls, and quality gates, embedding application-security testing and vulnerability management across the SDLC.

Qualifications

• 6-8 years of DevSecOps, cybersecurity or platform-engineering experience.
• Strong hands-on experience with GitLab CI/CD, Argo CD/GitOps and SAST tooling.
• Design secure pipelines, reusable security controls and quality gates.
• Embed application-security testing and vulnerability management across the SDLC.
• Provide solution designs, technical guidance and implementation support.
• Strong knowledge of AppSec, automation, policy-as-code and secure-by-design principles.
• Ability to collaborate with security, architecture, development and platform teams.

Responsibilities

• Design secure CI/CD pipelines and reusable security controls.
• Embed AppSec testing and vulnerability management across the SDLC.
• Provide solution designs, technical guidance and implementation support.
• Collaborate with security, architecture, development and platform teams.

Skills

GitLab CI/CD

Argo CD / GitOps

SAST tooling

AppSec

Policy as code

Secure-by-design

SDLC security

Tools

SAST tools

Job description

XPT Software is seeking an experienced DevSecOps specialist to design and implement secure CI/CD solutions for the Cybersecurity team. The role requires 6-8 years of DevSecOps, cybersecurity, or platform-engineering experience and hands-on expertise with GitLab CI/CD, Argo CD/GitOps, and SAST tooling.

You will design secure pipelines, reusable security controls, and quality gates, embedding application-security testing and vulnerability management across the SDLC.