Senior App Security Engineer | Hybrid Work & Impact

ASIC; Sydney; Hybrid; AUD 154,000 - 177,000; Full time

Benefits offered by this job

Attractive superannuation

Additional leave entitlements

50/50 hybrid work-from home model

Flexible work arrangements

Assistance for study and professional

Job summary

ASIC's Cyber Security Group is seeking a Senior Application Security Engineer to lead security initiatives across software development and deployment lifecycles. You will partner with development teams to embed secure design, governance, and testing throughout the lifecycle, while supporting cyber assurance and architecture functions and advancing the Cyber Uplift Program.

The role requires hands-on security engineering experience, strong coding knowledge, and the ability to drive secure

Qualifications

• Bachelor's degree in computer science or related discipline with 5+ years' software development experience.
• Experience securing CI/CD pipelines, automation processes and APIs.
• Hands-on experience with application security testing methods: SAST, SCA, DAST, IAST.
• Proficiency in Java, .NET, Python or JavaScript.

Responsibilities

• Partner with development teams to design secure solutions across the SDLC.
• Educate developers on secure coding practices and tooling.
• Lead threat modelling and architecture reviews to address security risks.
• Guide secure architecture across applications, code repositories, and environments.
• Coordinate penetration testing activities with relevant teams.
• Champion DevSecOps and SDLC security practices.
• Provide guidance on secure AI design and governance.

Skills

CI/CD security

Secure coding practices

Threat modelling

DevSecOps

Security governance

AI security

Programming knowledge

Education

Bachelor's degree in computer science or related field

Tools

SAST

SCA

DAST

IAST

Job description

ASIC's Cyber Security Group is seeking a Senior Application Security Engineer to lead security initiatives across software development and deployment lifecycles. You will partner with development teams to embed secure design, governance, and testing throughout the lifecycle, while supporting cyber assurance and architecture functions and advancing the Cyber Uplift Program.

The role requires hands-on security engineering experience, strong coding knowledge, and the ability to drive secure