Senior Application Security Engineer

ASIC; Melbourne; Híbrido; AUD 154.000 - 177.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Flexible work arrangements

Professional development support

Descripción de la vacante

ASIC's Cyber Security Group seeks a Senior Application Security Engineer to lead securing applications across the organisation. You will partner with development teams to embed security in the software lifecycle, educate engineers on secure coding, and drive threat modelling and architecture reviews.

You will coordinate penetration testing and promote DevSecOps while addressing AI security risks. The role offers a permanent full-time position with a salary range of AUD 154,355 to 176,927 plus

Formación

• Bachelor's degree in computer science or related field and/or 5+ years in software development with application security focus
• Experience securing CI/CD pipelines, automation, and APIs
• Hands-on with SAST, SCA, DAST, IAST security testing methodologies/tools
• Proficiency in Java, .NET, Python or JavaScript
• Ability to assess complex technical and stakeholder issues using data and systems to inform outcomes
• Relevant security certifications (CSSLP, CISSP) highly regarded but not essential

Responsabilidades

• Partner with development teams to design secure solutions and embed security across the SDLC
• Educate developers on secure coding and use of ASIC security tools
• Lead threat modelling and architecture reviews to address security risks
• Define secure architecture practices across apps, repos and environments
• Coordinate penetration testing activities with technical teams
• Champion DevSecOps and SDLC security across teams
• Provide guidance on secure AI design, risks and governance

Conocimientos

CI/CD security

Secure coding

SAST/DAST/IAST

Programming languages

Threat modelling

Educación

Bachelor's degree in CS

Herramientas

SAST tools

DAST/IAST tools

SCA

CI/CD tooling

Descripción del empleo

At ASIC, you can be the change that ensures a fair, strong and efficient financial system for the benefit of all Australians. Contribute to delivering on ASIC's purpose, vision, and strategic priorities to help maintain the integrity of the financial system and protect consumers from harm.

ASIC's Cyber Security Group is seeking an experienced Senior Application Security Engineer to join their Application Security Engineering team to provide ongoing application security support and guidance across the organisation.

• All ASIC office locations considered
• Permanent full-time position
• Salary from $154,355 to $176,927 (depending on experience) + 15.4 % superannuation
• Applications will close at 11:59pm AEDT, Sunday 1 November 2026

The team

ASIC's Cyber Security Group delivers a broad range of services across the organisation which include security architecture and design, incident response, and cyber assurance. We leverage advanced security technologies with a growing emphasis on automation and analytics to help ASIC become a best in class regulator for Australia's financial markets.

The role

As a Senior Application Security Engineer at ASIC, you will help to lead product and application security initiatives and embedding robust security practices across the software development and deployment lifecycle. Additionally, you will support the cyber assurance and cyber architecture functions and play a key role in delivering the Cyber Uplift Program.

More Specifically, You Will

• Partner closely with application development teams to design secure solutions and embed security throughout software development practices and the broader development lifecycle.
• Educate and advise developers on secure coding practices, including the effective use of ASIC's application security testing tools and capabilities.
• Lead threat modelling and application architecture reviews to identify, assess and address security risks and threats throughout the design and development lifecycle.
• Support project delivery by defining and guiding secure architecture practices across applications, code repositories and development environments.
• Manage and coordinate penetration testing activities, including engagement with relevant technical teams and stakeholders.
• Champion DevSecOps and secure software development lifecycle (SDLC) practices across development, engineering and support teams to strengthen security by design.
• Provide specialist guidance on secure AI design, including AI security risks and controls, responsible AI principles, governance requirements and emerging AI security threats.

About You

The ideal candidate for the Senior Application Security Engineer role at ASIC will be a seasoned security engineering professional with a strong technical foundation in software development and a collaborative mindset. They will bring a proactive approach to embedding security throughout the software development lifecycle and demonstrate leadership in driving secure engineering practices across the organisation.

In Addition, You Will Have

• A bachelor's degree in computer science or a related discipline and/or at least five years' software development experience, combined with demonstrated experience in application security engineering or a comparable security focused role.
• Demonstrated knowledge and practical experience in securing CI/CD pipelines, automation processes and APIs.
• Hands-on experience with application security testing methodologies and tools, including SAST, SCA, DAST and IAST.
• Proficiency in at least one relevant programming or scripting language, such as Java, .NET, Python or JavaScript.
• Demonstrated ability to assess, analyse and resolve complex technical and stakeholder related matters, drawing on relevant information sources, data, reporting, systems and databases to inform appropriate outcomes.
• Relevant security certifications such as Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Security Professional (CISSP), or equivalent secure coding or offensive security certifications are highly regarded but not essential.

About ASIC

ASIC's remit is one of the broadest of regulators across the world. ASIC regulates corporations, markets, financial services and consumer credit and monitors and promotes market integrity and consumer protection in the Australian financial system. Through our enforcement work, we hold to account those who contravene the law, working to achieve strong outcomes that address the greatest consumer and investor harms.

ASIC is an equal opportunity employer seeking people who want to make a difference. ASIC is committed to a diverse and inclusive workplace where the very best talent in Australia chooses to work. Applications from people of all ages, cultural backgrounds, abilities, LGBTIQ+ identity, and people of Aboriginal and Torres Strait Islander descent are encouraged to apply.

We Offer a Range Of Employee Benefits Including

• Attractive superannuation
• Additional leave entitlements
• 50/50 hybrid work-from home model
• Flexible work arrangements
• Assistance for study and professional development

Click here to view ASIC's salary and benefits guide.

To read more about ASIC, you can visit our website or review our Corporate Plan.

To work with us, you need to be an Australian citizen and be prepared to complete an ASIC Suitability and Baseline Assessment.