Senior App Security Engineer - Hybrid, Regulator Impact

ASIC; Sydney; Hybrid; AUD 154,000 - 177,000; Full time

Benefits offered by this job

Attractive superannuation

Additional leave entitlements

50/50 hybrid work-from home model

Professional development support

Job summary

ASIC's Cyber Security Group is seeking a Senior Application Security Engineer to lead secure coding and architecture reviews across the software development lifecycle. You will partner with development teams to embed security, advise on testing tools, and help deliver the Cyber Uplift Program.

The role requires a degree in computer science and at least five years in software development with demonstrated application security expertise, plus knowledge of SAST, SCA, DAST and IAST.

Qualifications

• Bachelor's degree in computer science or related discipline and at least five years' software development experience with application security experience.
• Experience securing CI/CD pipelines, automation processes and APIs.
• Hands-on with SAST, SCA, DAST and IAST tools.

Responsibilities

• Lead secure coding practices and embed security across the software development lifecycle.
• Educate developers on secure coding and use of application security testing tools.
• Lead threat modelling and architecture reviews to identify and address security risks.
• Define and guide secure architecture across applications, repositories and environments.
• Coordinate penetration testing activities with technical teams and stakeholders.
• Champion DevSecOps and secure SDLC practices across teams to build security by design.
• Provide guidance on secure AI design, AI security risks, controls and governance.

Skills

Secure coding practices

CI/CD security

SAST

SCA

DAST

IAST

Threat modelling

DevSecOps

Secure SDLC

Security architecture

Education

Bachelor's degree in computer science

Job description

ASIC's Cyber Security Group is seeking a Senior Application Security Engineer to lead secure coding and architecture reviews across the software development lifecycle. You will partner with development teams to embed security, advise on testing tools, and help deliver the Cyber Uplift Program.

The role requires a degree in computer science and at least five years in software development with demonstrated application security expertise, plus knowledge of SAST, SCA, DAST and IAST.