Senior Application Security Engineer

XPT Software Australia Pty Ltd; Sydney; On-site; AUD 140,000 - 180,000; Full time

Job summary

XPT Software Australia Pty Ltd in Sydney invites an experienced Senior Application Security Engineer to lead the secure code scanning rollout across the software development lifecycle. You will drive adoption of Snyk, Fortify, Checkmarx, or Veracode with integration into existing CI/CD pipelines.

You will partner with development, DevOps and security teams to define scanning strategies, triage vulnerabilities, and establish governance for long-term platform adoption.

Qualifications

• Experience implementing Secure Code Scanning in large enterprise environments.
• Strong knowledge of SAST, SDLC and DevSecOps practices.
• Ability to design and implement secure coding standards and workflows.

Responsibilities

• Lead the implementation and onboarding of Secure Code Scanning platforms such as Snyk, Fortify, Checkmarx, or Veracode across the software development lifecycle.
• Design and implement integrations with GitHub, GitLab and CI/CD pipelines to enable automated security scanning and policy enforcement.
• Collaborate with development, DevOps, and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.
• Proactively identify implementation challenges, integration dependencies, developer adoption issues, and performance impacts, and provide practical solutions to mitigate risks.
• Establish vulnerability management processes, including triage, risk prioritization, exception handling, SLA definition, and remediation tracking.
• Develop technical standards, deployment procedures, operational runbooks, and governance processes to support long-term platform adoption.
• Provide hands-on support during implementation, testing, rollout, and post-go-live stabilization activities while mentoring development teams on secure coding practices.

Skills

Secure coding

SAST

Vulnerability management

DevSecOps

Secure Code Scanning

Snyk

Fortify

Checkmarx

Veracode

GitHub

GitLab

CI/CD pipelines

Tools

Snyk

Fortify

Checkmarx

Veracode

GitHub

GitLab

CI/CD tooling

Job description

XPT Software Australia Pty Ltd | Contract

Senior Application Security Engineer

Sydney, Australia | Posted on 09/21/2026

• XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
  
• XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
  
• We have 120+technocrats in Australia working at our clientlocations.
  
• XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
  
• We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
  

Job Description

Job description: Senior Application Security Engineer – Secure Code ScanningImplementation

• Lead the implementation and onboarding of Secure Code Scanningplatforms such as Snyk, Fortify, Checkmarx, or Veracode across thesoftware development lifecycle.
  
• Design and implement integrations with GitHub, GitLab and CI/CDpipelines to enable automated security scanning and policy enforcement.
  
• Collaborate with development, DevOps, and security teams to definescanning strategies, remediation workflows, quality gates, and securecoding controls.
  
• Proactively identify implementation challenges, integration dependencies,developer adoption issues, and performance impacts, and provide practicalsolutions to mitigate risks.
  
• Establish vulnerability management processes, including triage,risk prioritization, exception handling, SLA definition, and remediationtracking.
  
• Develop technical standards, deployment procedures, operationalrunbooks, and governance processes to support long-term platform adoption.
  
• Provide hands-on support during implementation, testing, rollout,and post-go-live stabilization activities while mentoring developmentteams on secure coding practices.
  
• Demonstrated experience implementing similar Application Securityand Secure Coding solutions in large enterprise environments, with strongknowledge of SAST, vulnerability management, SDLC, and DevSecOpspractices.