Senior App Security Engineer - DevSecOps & Automation

Westpac Group; Sydney; On-site; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Flexible work arrangements

Learning and development opportunities

Community volunteering initiatives

Job summary

Westpac Group in Sydney is seeking a Senior Security Engineer within the Application Security team to engineer, integrate and operate security capabilities across Westpac’s software development environments.

You will deliver scalable, automated security solutions embedded into development and DevOps platforms, guiding engineering teams and strengthening application security practices with hands-on tooling such as Snyk, GitHub integrations, and CI/CD security.

Qualifications

• Experience in building security controls into development environments and pipelines.
• Strong knowledge of application security, tooling and vulnerability management.
• Understanding secure SDLC and shift-left practices.

Responsibilities

• Engineering, operating and maintaining application security platforms and tooling.
• Implementing automated code analysis, software composition analysis, secrets scanning and software supply-chain security capabilities.
• Integrating security controls into developer environments, GitHub repositories and CI/CD pipelines.
• Embedding automated security controls early in the software development lifecycle.
• Automating vulnerability identification, remediation and prevention at scale.
• Partnering with engineering and platform teams to deliver repeatable security outcomes.
• Providing practical application security guidance to developers and engineering teams.
• Supporting education and enablement initiatives that uplift secure development capability.

Skills

Security engineering

CI/CD integration

Vulnerability management

Shift-left security

Automation

Tools

Snyk

GitHub

Wiz

Python

DevOps tooling

Job description

Westpac Group in Sydney is seeking a Senior Security Engineer within the Application Security team to engineer, integrate and operate security capabilities across Westpac’s software development environments.

You will deliver scalable, automated security solutions embedded into development and DevOps platforms, guiding engineering teams and strengthening application security practices with hands-on tooling such as Snyk, GitHub integrations, and CI/CD security.