Senior Application Security Engineer

ASIC; Brisbane; Hybrid; AUD 154,000 - 177,000; Full time

Benefits offered by this job

Attractive superannuation

Additional leave entitlements

50/50 hybrid work-from home model

Flexible work arrangements

Assistance for study and professional 

Job summary

ASIC's Cyber Security Group is seeking a Senior Application Security Engineer to join the Application Security Engineering team to provide ongoing application security support and guidance across the organisation.

You will lead secure coding practices, threat modelling and secure architecture reviews, coordinate penetration testing, champion DevSecOps across the SDLC, and provide specialist guidance on secure AI design.

Qualifications

• Bachelor's degree in computer science or a related discipline.
• At least five years' software development experience with application security engineering.
• Experience securing CI/CD pipelines, automation processes and APIs.
• Hands-on with SAST, SCA, DAST and IAST testing methodologies.
• Proficiency in Java, .NET, Python or JavaScript.

Responsibilities

• Collaborate with development teams to design secure solutions and embed security across the lifecycle.
• Educate developers on secure coding and use of application security testing tools.
• Lead threat modelling and architecture reviews to address security risks throughout development.
• Define secure architecture practices across applications and development environments.
• Coordinate penetration testing activities with technical teams and stakeholders.
• Champion DevSecOps and secure SDLC practices across teams to strengthen security by design.
• Provide guidance on secure AI design, AI security risks and controls.

Skills

CI/CD security

Secure coding practices

Threat modelling

AI security

Appsec testing tools

Programming languages (Java, .NET, Py,

Education

Bachelor's degree in computer science or related discipline

Tools

SAST tooling

SCA tooling

DAST tooling

IAST tooling

Job description

At ASIC, you can be the change that ensures a fair, strong and efficient financial system for the benefit of all Australians. Contribute to delivering on ASIC's purpose, vision, and strategic priorities to help maintain the integrity of the financial system and protect consumers from harm.

ASIC's Cyber Security Group is seeking an experienced Senior Application Security Engineer to join their Application Security Engineering team to provide ongoing application security support and guidance across the organisation.

• All ASIC office locations considered
• Permanent full-time position
• Salary from $154,355 to $176,927 (depending on experience) + 15.4 % superannuation
• Applications will close at 11:59pm AEDT, Sunday 1 November 2026

The team

ASIC's Cyber Security Group delivers a broad range of services across the organisation which include security architecture and design, incident response, and cyber assurance. We leverage advanced security technologies with a growing emphasis on automation and analytics to help ASIC become a best in class regulator for Australia's financial markets.

The role

As a Senior Application Security Engineer at ASIC, you will help to lead product and application security initiatives and embedding robust security practices across the software development and deployment lifecycle. Additionally, you will support the cyber assurance and cyber architecture functions and play a key role in delivering the Cyber Uplift Program.

More Specifically, You Will

• Partner closely with application development teams to design secure solutions and embed security throughout software development practices and the broader development lifecycle.
• Educate and advise developers on secure coding practices, including the effective use of ASIC's application security testing tools and capabilities.
• Lead threat modelling and application architecture reviews to identify, assess and address security risks and threats throughout the design and development lifecycle.
• Support project delivery by defining and guiding secure architecture practices across applications, code repositories and development environments.
• Manage and coordinate penetration testing activities, including engagement with relevant technical teams and stakeholders.
• Champion DevSecOps and secure software development lifecycle (SDLC) practices across development, engineering and support teams to strengthen security by design.
• Provide specialist guidance on secure AI design, including AI security risks and controls, responsible AI principles, governance requirements and emerging AI security threats.

About You

The ideal candidate for the Senior Application Security Engineer role at ASIC will be a seasoned security engineering professional with a strong technical foundation in software development and a collaborative mindset. They will bring a proactive approach to embedding security throughout the software development lifecycle and demonstrate leadership in driving secure engineering practices across the organisation.

In Addition, You Will Have

• A bachelor's degree in computer science or a related discipline and/or at least five years' software development experience, combined with demonstrated experience in application security engineering or a comparable security focused role.
• Demonstrated knowledge and practical experience in securing CI/CD pipelines, automation processes and APIs.
• Hands-on experience with application security testing methodologies and tools, including SAST, SCA, DAST and IAST.
• Proficiency in at least one relevant programming or scripting language, such as Java, .NET, Python or JavaScript.
• Demonstrated ability to assess, analyse and resolve complex technical and stakeholder related matters, drawing on relevant information sources, data, reporting, systems and databases to inform appropriate outcomes.
• Relevant security certifications such as Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Security Professional (CISSP), or equivalent secure coding or offensive security certifications are highly regarded but not essential.

About ASIC

ASIC's remit is one of the broadest of regulators across the world. ASIC regulates corporations, markets, financial services and consumer credit and monitors and promotes market integrity and consumer protection in the Australian financial system. Through our enforcement work, we hold to account those who contravene the law, working to achieve strong outcomes that address the greatest consumer and investor harms.

ASIC is an equal opportunity employer seeking people who want to make a difference. ASIC is committed to a diverse and inclusive workplace where the very best talent in Australia chooses to work. Applications from people of all ages, cultural backgrounds, abilities, LGBTIQ+ identity, and people of Aboriginal and Torres Strait Islander descent are encouraged to apply.

We Offer a Range Of Employee Benefits Including

• Attractive superannuation
• Additional leave entitlements
• 50/50 hybrid work-from home model
• Flexible work arrangements
• Assistance for study and professional development

Click here to view ASIC's salary and benefits guide.

To read more about ASIC, you can visit our website or review our Corporate Plan.

To work with us, you need to be an Australian citizen and be prepared to complete an ASIC Suitability and Baseline Assessment.