Senior App Security Consultant & DevSecOps Specialist

CyberCX; Canberra; On-site; AUD 110,000 - 160,000; Full time

Job summary

CyberCX is seeking a Senior Application Security Consultant to deliver high-quality application security services and technical assessments for complex environments. You will support the Application Security program and help foster a growth-focused practice culture.

You will be familiar with Application Security, Secure Code Reviews, Threat Modelling, OWASP, and DevSecOps, and you will contribute to presales activities and client leadership across engagements.

Qualifications

• 3+ years of experience in application security services, penetration testing, and/or software development.
• Experience conducting threat modelling exercises and design reviews.
• Experience building and using automated security testing tools.
• Experience implementing DevSecOps processes and managing CI/CD pipelines.
• Experience conducting secure code reviews for various languages/frameworks.
• Experience with Secure SDLC and Secure DevOps reviews against OWASP SAMM, BSIMM or DevSecOps maturity model.
• Experience with containerisation and Infrastructure as Code (IaC).
• Applicants must be an Australian Citizen or Permanent Resident.

Responsibilities

• Deliver top application security services and STA services for large or complex testing engagements.
• Build and promote strong relationships with customers and explore opportunities within existing and new accounts.
• Prepare high-quality reports detailing security issues, recommendations, and next steps for customers.
• Support defining and executing the Application Security strategy to upskill CyberCX delivery specialists.
• Engage with Sales and Solutions teams in presales capacity to assist with methodology, costing scoping, proposals, RFQs and tenders.
• Act as a subject matter expert and technical leader within STA and the broader Application Security practice.
• Assist with R&D, innovation, and practice improvement activities, under supervision.

Skills

Application security

Penetration testing

Threat modelling

DevSecOps

Secure code reviews

CI/CD pipelines

Containerisation

Infrastructure as Code

Job description

CyberCX is seeking a Senior Application Security Consultant to deliver high-quality application security services and technical assessments for complex environments. You will support the Application Security program and help foster a growth-focused practice culture.

You will be familiar with Application Security, Secure Code Reviews, Threat Modelling, OWASP, and DevSecOps, and you will contribute to presales activities and client leadership across engagements.