Senior Application Security Engineer

Michael Page; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Transformation project

Hybrid environment

Long-term opportunity

Upskill in security & AI

Job summary

Michael Page is partnering with a global tech leader in Sydney to hire a Senior Application Security Engineer. You will lead secure coding initiatives, implement SAST tools across the SDLC, and collaborate with DevOps and development teams to embed security into CI/CD pipelines.

You will define scanning strategies, manage vulnerabilities, and mentor teams on secure coding practices in a hybrid, long-term program.

Qualifications

• Experience as an Application Security or DevSecOps engineer in enterprise environments.
• Hands-on with SAST tools (Snyk, Fortify, Checkmarx, Veracode).
• Secure coding practices and SSDLC knowledge.
• Experience integrating security tooling into CI/CD pipelines.

Responsibilities

• Lead implementation and onboarding of Secure Code Scanning platforms across the SDLC.
• Design integrations with GitHub, GitLab and CI/CD to enable automated scanning.
• Collaborate with security, DevOps and development teams on remediation workflows.
• Define vulnerability management processes, SLAs, and governance.

Skills

Security engineering

DevSecOps

Stakeholder engagement

Problem solving

Delivery focused

Education

Bachelor's degree in CS/IT

Tools

Snyk

Fortify

Checkmarx

Veracode

GitHub

GitLab

Job description

• Long-term opportunity on transformation project

• Hybrid environment and flexible working
• Long-term opportunity on transformation project

About Our Client

Our client is a leading global technology consulting and services organisation that partners with enterprises to deliver large-scale digital transformation, cloud, cybersecurity, and technology modernisation initiatives. They offer a collaborative and innovative environment, providing opportunities to work on complex enterprise programs leveraging modern technologies and best-practice delivery frameworks.

Job Description

Key responsibilities:

• Lead the implementation and onboarding of Secure Code Scanning platforms such as Snyk, Fortify, Checkmarx, or Veracode across the software development lifecycle.
• Design and implement integrations with GitHub, GitLab and CI/CD pipelines to enable automated security scanning and policy enforcement.
• Collaborate with development, DevOps, and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.
• Proactively identify implementation challenges, integration dependencies, developer adoption issues, and performance impacts, and provide practical solutions to mitigate risks.
• Establish vulnerability management processes, including triage, risk prioritisation, exception handling, SLA definition, and remediation tracking.
• Develop technical standards, deployment procedures, operational runbooks, and governance processes to support long-term platform adoption.
• Provide hands‑on support during implementation, testing, rollout, and post‑go‑live stabilization activities while mentoring development teams on secure coding practices.

The Successful Applicant

A successful Senior Application Security Engineer should have:

• Proven experience as an Application Security Engineer or DevSecOps Engineer in enterprise environments.
• Hands‑on experience implementing SAST tools such as Snyk, Fortify, Checkmarx, or Veracode.
• Strong knowledge of secure coding practices, application security, and SSDLC principles.
• Experience integrating security tooling into GitHub, GitLab, and CI/CD pipelines.
• Expertise in vulnerability management, remediation workflows, and risk prioritisation.
• Strong stakeholder engagement skills with the ability to work across Security, Development, and DevOps teams.
• Excellent problem‑solving abilities and a practical, delivery‑focused approach.
• Experience driving adoption of security controls and DevSecOps practices across development teams.
• Demonstrate experience implementating similar Application Security and Secure Coding solutions in larger enterprise environments
• Excellent communication skills to collaborate with technical teams.

What's on Offer

• Transformation project
• Hybrid environment and flexible working
• Long‑term opportunity with project
• Ability to upskill and work with security and AI

Quote job ref: JN-092026-7108890