Senior App Security Engineer - Hybrid Work & Impact

ASIC; Canberra; Hybrid; AUD 154,000 - 177,000; Full time

Benefits offered by this job

attractive superannuation

additional leave entitlements

50/50 hybrid work-from home model

flexible work arrangements

assistance for study and professional

Job summary

ASIC’s Cyber Security Group seeks a Senior Application Security Engineer to lead secure development practices across the software lifecycle and embed robust security. You will educate developers on secure coding, govern AI security risks, and drive secure architecture reviews.

You will coordinate penetration testing efforts, partner with development teams, and advance ASIC’s security testing capabilities using SAST/DAST/IAST tools to strengthen the organisation’s overall security posture.

Qualifications

• Bachelor’s degree in computer science or a related discipline; at least five years in software development with application security focus.
• Experience securing CI/CD pipelines, automation, and APIs.
• Hands-on with application security testing methods and tools (SAST/DAST/IAST).
• Proficiency in Java, .NET, Python or JavaScript.
• Ability to assess complex technical and stakeholder issues and drive outcomes.
• Security certifications (CSSLP, CISSP, or similar) are advantageous but not required.

Responsibilities

• Lead secure development practices across the SDLC and DevSecOps initiatives.
• Coordinate and manage penetration testing activities with technical teams and stakeholders.
• Educate developers on secure coding and effective use of ASIC’s security tools.
• Conduct threat modelling and architecture reviews to mitigate risks.
• Provide guidance on secure AI design and governance considerations.

Skills

CI/CD security

SAST/DAST/IAST

Threat modelling

Secure coding practices

Cross-team collaboration

Leadership/mentoring

Education

Bachelor’s degree in Computer Science or related field

Tools

SAST

SCA

DAST

IAST

Job description

ASIC’s Cyber Security Group seeks a Senior Application Security Engineer to lead secure development practices across the software lifecycle and embed robust security. You will educate developers on secure coding, govern AI security risks, and drive secure architecture reviews.

You will coordinate penetration testing efforts, partner with development teams, and advance ASIC’s security testing capabilities using SAST/DAST/IAST tools to strengthen the organisation’s overall security posture.