Senior App Security Engineer - Hybrid DevSecOps Lead

ASIC; Traralgon; Hybrid; AUD 154,000 - 177,000; Full time

Benefits offered by this job

Superannuation

Additional leave

Hybrid 50/50

Flexible work

Study support

Job summary

ASIC's Cyber Security Group is seeking a Senior Application Security Engineer to lead secure coding practices and embed security across the software development lifecycle. You will partner with development teams, mentor engineers on secure design, and drive the Cyber Uplift Program with a hands-on, collaborative approach.

Ideal candidates have a bachelor's degree in computer science, 5+ years in software development, and experience with SAST/DAST/IAST, CI/CD security and API protection.

Qualifications

• Bachelor's degree in computer science or a related discipline and at least five years' software development experience.
• Demonstrated knowledge and practical experience in securing CI/CD pipelines, automation processes and APIs.
• Hands-on experience with application security testing methodologies and tools, including SAST, SCA, DAST and IAST.

Responsibilities

• Partner with development teams to design secure solutions and embed security across the software development lifecycle.
• Educate and advise developers on secure coding practices and use of ASIC's security testing tools.
• Lead threat modelling and architecture reviews to identify and address security risks.
• Define and guide secure architecture practices across applications, repos and environments.
• Coordinate penetration testing activities with technical teams and stakeholders.
• Champion DevSecOps and SDLC practices to strengthen security by design.
• Provide specialist guidance on secure AI design, AI security risks and governance.

Skills

Security engineering

CI/CD security

SAST DAST IAST

APIs security

Secure coding

Java/.NET/Python/JS

Education

Bachelor's degree in computer science or related discipline

Tools

ASIC testing tools

Job description

ASIC's Cyber Security Group is seeking a Senior Application Security Engineer to lead secure coding practices and embed security across the software development lifecycle. You will partner with development teams, mentor engineers on secure design, and drive the Cyber Uplift Program with a hands-on, collaborative approach.

Ideal candidates have a bachelor's degree in computer science, 5+ years in software development, and experience with SAST/DAST/IAST, CI/CD security and API protection.