Senior Application Security Engineer

ASIC; Darwin; Hybrid; AUD 154,000 - 177,000; Full time

Benefits offered by this job

Strong superannuation

Hybrid work model

Flexible work arrangements

Study and professional development

Job summary

ASIC is seeking a Senior Application Security Engineer to lead security initiatives across the software development lifecycle. You will partner with development teams to design secure solutions, educate on secure coding practices, and drive secure engineering across the organisation.

The role requires a degree and 5+ years in software development with a security focus, strong CI/CD security experience, and hands-on tooling in SAST/DAST/IAST.

Qualifications

• Bachelor's degree in computer science or a related discipline and at least five years' software development experience with demonstrated application security engineering experience.

Responsibilities

• Lead secure development practices across the SDLC.
• Educate developers on secure coding with ASIC tools.
• Lead threat modelling and architecture reviews to address security risks.
• Define and guide secure architecture across apps, repos, and environments.
• Coordinate and manage penetration testing activities with technical teams.
• Champion DevSecOps and secure SDLC practices across teams.
• Provide guidance on secure AI design, AI security risks and controls.

Skills

Secure coding practices

Threat modelling

DevSecOps

AI security

Education

Bachelor's degree in CS or related

Tools

Application security testing tools (SAST/DAST/IAST)

Job description

At ASIC, you can be the change that ensures a fair, strong and efficient financial system for the benefit of all Australians. Contribute to delivering on ASIC's purpose, vision, and strategic priorities to help maintain the integrity of the financial system and protect consumers from harm.

ASIC's Cyber Security Group is seeking an experienced Senior Application Security Engineer to join their Application Security Engineering team to provide ongoing application security support and guidance across the organisation.

• All ASIC office locations considered
• Permanent full-time position
• Salary from $154,355 to $176,927 (depending on experience) + 15.4 % superannuation
• Applications will close at 11:59pm AEDT, Sunday 1 November 2026

The team

ASIC's Cyber Security Group delivers a broad range of services across the organisation which include security architecture and design, incident response, and cyber assurance. We leverage advanced security technologies with a growing emphasis on automation and analytics to help ASIC become a best in class regulator for Australia's financial markets.

The role

As a Senior Application Security Engineer at ASIC, you will help to lead product and application security initiatives and embedding robust security practices across the software development and deployment lifecycle. Additionally, you will support the cyber assurance and cyber architecture functions and play a key role in delivering the Cyber Uplift Program.

More Specifically, You Will

• Partner closely with application development teams to design secure solutions and embed security throughout software development practices and the broader development lifecycle.
• Educate and advise developers on secure coding practices, including the effective use of ASIC's application security testing tools and capabilities.
• Lead threat modelling and application architecture reviews to identify, assess and address security risks and threats throughout the design and development lifecycle.
• Support project delivery by defining and guiding secure architecture practices across applications, code repositories and development environments.
• Manage and coordinate penetration testing activities, including engagement with relevant technical teams and stakeholders.
• Champion DevSecOps and secure software development lifecycle (SDLC) practices across development, engineering and support teams to strengthen security by design.
• Provide` specialist guidance on secure AI design, including AI security risks and controls, responsible AI principles, governance requirements and emerging AI security threats.

About You

The ideal candidate for the Senior Application Security Engineer role at ASIC will be a seasoned security engineering professional with a strong technical foundation in software development and a collaborative mindset. They will bring a proactive approach to embedding security throughout the software development lifecycle and demonstrate leadership in driving secure engineering practices across the organisation.

In Addition, You Will Have

• A bachelor's degree in computer science or a related discipline and/or at least five years' software development experience, combined with demonstrated experience in application security engineering or a comparable security focused role.
• Demonstrated knowledge and practical experience in securing CI/CD pipelines, automation processes and APIs.
• Hands-on experience with application security testing methodologies and tools, including SAST, SCA, DAST and IAST.
• Proficiency in at least one relevant programming or scripting language, such as Java, .NET, Python or JavaScript.
• Demonstrated ability to assess, analyse and resolve complex technical and stakeholder related matters, drawing on relevant information sources, data, reporting, systems and databases to inform appropriate outcomes.
• Relevant security certifications such as Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Security Professional (CISSP), or equivalent secure coding or offensive security certifications are highly regarded but not essential.

About ASIC

ASIC's remit is one of the broadest of regulators across the world. ASIC regulates corporations, markets, financial services and consumer credit and monitors and promotes market integrity and consumer protection in the Australian financial system. Through our enforcement work, we hold to account those who contravene the law, working to achieve strong outcomes that address the greatest consumer and investor harms.

ASIC is an equal opportunity employer seeking people who want to make a difference. ASIC is committed to a diverse and inclusive workplace where the very best talent in Australia chooses to work. Applications from people of all ages, cultural backgrounds, abilities, LGBTIQ+ identity, and people of Aboriginal and Torres Strait Islander descent are encouraged to apply.

We Offer a Range Of Employee Benefits Including

• Attractive superannuation
• Additional leave entitlements
• 50/50 hybrid work-from home model
• Flexible work arrangements
• Assistance for study and professional development

To read more about ASIC, you can visit our website or review our Corporate Plan.

To work with us, you need to be an Australian citizen and be prepared to complete an ASIC Suitability and Baseline Assessment.