Senior Application Security Engineer

Macquarie Bank Limited; Council of the City of Sydney; Hybrid; AUD 110,000 - 140,000; Full time

Job summary

A leading financial services group in New South Wales is seeking a Senior Application Security Engineer. This role involves integrating security practices into the software development lifecycle and collaborating with teams to enhance application security. The ideal candidate should have over 4 years of experience in application security, proficiency in secure coding, and familiarity with cloud technologies like AWS or GCP. The company offers wellness programs, flexible work arrangements, and a commitment to diversity.

Benefits

Wellbeing leave days

Paid parental leave

Paid volunteer leave

Gender affirmation leave

Employee Assistance Program

Learning and development opportunities

Flexible working arrangements

Qualifications

• 4+ years' experience in the application security domain.
• In-depth knowledge and hands-on experience in securing applications.
• Proficiency in secure code review and security testing tools.

Responsibilities

• Integrate security practices into the software development lifecycle.
• Collaborate with development teams to enhance security posture.

Skills

Application security experience

Secure coding

DevSecOps practices

Communication skills

Tools

AWS

GCP

Kubernetes

Java

Python

Job description

Join Macquarie’s Application Security team to shape the future of secure software development and become a vital part of protecting our digital future.

At Macquarie, our advantage is bringing together diverse people and empowering them to shape all kinds of possibilities. We are a global financial services group operating in 31 markets and with 56 years of unbroken profitability. You’ll be part of a friendly and supportive team where everyone - no matter what role - contributes ideas and drives outcomes.

What role will you play?

In your role as a Senior Application Security Engineer, you will play a critical role in integrating security practices into the software development lifecycle and collaborate with development teams to create a secure development environment and enhance the security posture of our applications.

What you offer

• 4+ years' experience in the application security domain, with in-depth knowledge and hands-on experience in securing applications throughout the software development lifecycle
• Proficiency in secure code review, and utilising tools to identify security weaknesses
• Familiarity with Static Application Security Testing (SAST), Software Composition Analysis (SCA), Container Security, Infrastructure as Code (IaC) Security, API Security, Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), and Runtime Application Self-Protection (RASP)
• Experience in DevSecOps practices and tools, security engineering, infrastructure-as-code, CI/CD, automation, and application development is valuable
• Familiarity with security frameworks and standards such as OWASP, NIST, and ISO 27001
• Demonstrable experience working with public cloud (AWS and/or GCP), containers, Kubernetes and related technologies, along with proficiency in at least one programming language such as Java, Python, Go, or similar
• Familiarity with Agile environments is desirable, along with a strong understanding of vendor technologies, roadmaps, and emerging IT industry trends
• Excellent communication skills, with ability to communicate effectively about abstract and complex topics to a range of audiences.

What we offer

• 1 wellbeing leave day per year
• Up to 5 additional service bonus leave days per year
• Up to 20 weeks’ paid parental leave for primary caregivers along with 12 days of transition leave upon return to work, and 6 weeks’ paid leave for non-primary caregivers
• 2 days of paid volunteer leave and donation matching
• Up to 12 months’ gender affirmation leave, including 6 weeks’ paid leave
• Access to Employee Assistance Program and wellbeing benefits including skin and health checks, and flu vaccinations
• Access to a wide range of salary packaging options
• Access to a wide range of learning and development opportunities, including reimbursement for professional membership or subscription
• Hybrid and flexible working arrangements, dependent on role
• Reimbursement for work from home equipment

About Technology

Technology enables every aspect of Macquarie, for our people, our customers and our communities. We’re a global team that is passionate about accelerating the digital enterprise, connecting people and data, building platforms and applications and designing tomorrow’s technology solutions.

Our commitment to diversity, equity and inclusion

We are committed to fostering a diverse, equitable and inclusive workplace. We encourage people from all backgrounds to apply and welcome all identities, including race, ethnicity, cultural identity, nationality, gender (including gender identity or expression), age, sexual orientation, marital or partnership status, parental, caregiving or family status, family and domestic violence status, neurodiversity, religion or belief, disability, or socio-economic background. We welcome further discussions on how you can feel included and belong at Macquarie as you progress through our recruitment process.

Our aim is to provide reasonable adjustments to individuals who may need support during the recruitment process and through working arrangements. If you require additional assistance, please let us know in the application process.