Senior Application Security Consultant

CyberCX; Adelaide; On-site; AUD 120,000 - 180,000; Full time

Job summary

CyberCX is seeking a Senior Application Security Consultant in Australia. You will deliver high-quality application security activities and technical assessments across complex environments, providing security expertise to clients.

The role supports the Application Security program, fosters a growth-focused culture, and engages with customers to promote secure practices and strategic security initiatives.

Qualifications

• 3+ years of experience in application security services, penetration testing, and/or software development.

Responsibilities

• Deliver top application security services and complex testing to a high standard.
• Build strong relationships with customers and identify opportunities within existing and new customers.
• Prepare high quality reports with security issues, recommendations and roadmaps; lead discussions with customers.

Skills

Application security

Threat modelling

Secure code reviews

DevSecOps

CI/CD pipelines

Containerisation

IaC

Job description

The Senior Application Security Consultant is responsible for delivering high-quality application security activities and technical security assessments against complex environments and providing security expertise to CyberCX clients.

They play a critical role in supporting the Application Security program of works and a software assurance-focused team and practice culture which fosters personal growth and high employee engagement.

You will be familiar with Application Security, Secure Code Reviews, Threat Modelling, OWASP, and DevSecOps.

• Deliver the top Application Security services as well as STA services where required to a high standard, specifically those with large or complex testing requirements.
• Build out and promote strong, long-lasting relationships with a diverse range of customers, and identify and explore opportunities within existing and new customers.
• Prepare high quality reports detailing security issues, making recommendations, and identifying solutions, and lead presentations and discussions with customers around Application Security work performed, key results, strategies, processes recommendations and next steps/roadmap to success
• Support in defining and executing the Application Security strategy and planning focused on upskilling practices internally at CyberCX to create delivery specialists and identify new ways of delivering Application Security Services to clients
• Engage with Customer Sales and Customer Solutions team in a presales-capacity to assist with technical methodology aspects, costing scoping, standardised proposal methodologies, RFQs and tenders
• Act as a subject matter expert and technical leader both within STA and externally across practice for Application Security services.
• Assist with R&D, innovation, and practice improvement activities, under supervision

Preferred Qualifications, Experience & Skills

• 3+ years of experience in application security services, penetration testing, and/or software development, including but not limited to the following:
• Conducting threat modelling exercises and design reviews
• Building, supporting and implementing automated security testing tools
• Implementing DevSecOps processes and managing CI/CD pipelines
• Conducting secure code reviews for various languages and frameworks
• Performing Secure SDLC and Secure DevOps reviews against industry standards such as OWASP SAMM, BSIMM or DevSecOps maturity model
• Experience with containerisation and Infrastructure as Code (IaC)

Applicants must be an Australian Citizen or Permanent Resident.