Senior Application Security Engineer

Michael Page; Sydney; Hybrid; AUD 140,000 - 200,000; Full time

Benefits offered by this job

Hybrid work environment

Transformation project

Upskill with security and AI

Job summary

Michael Page is seeking a Senior Application Security Engineer to lead secure code scanning initiatives and build integration with GitHub, GitLab, and CI/CD pipelines. You will define scanning strategies, remediation workflows, and governance to enable rapid, secure software delivery.

You will collaborate with development, DevOps, and security teams to drive adoption of secure coding practices, manage vulnerabilities, and mentor engineers across enterprise programs.

Qualifications

• Proven experience as an Application Security Engineer or DevSecOps Engineer in enterprise environments.
• Hands-on experience implementing SAST tools such as Snyk, Fortify, Checkmarx, or Veracode.
• Strong knowledge of secure coding practices, application security, and SSDLC principles.
• Experience integrating security tooling into GitHub, GitLab, and CI/CD pipelines.
• Expertise in vulnerability management, remediation workflows, and risk prioritisation.
• Strong stakeholder engagement skills with the ability to work across Security, Development, and DevOps teams.
• Excellent problem-solving abilities and a practical, delivery-focused approach.
• Experience driving adoption of security controls and DevSecOps practices across development teams.

Responsibilities

• Lead the implementation and onboarding of Secure Code Scanning platforms across the software development lifecycle.
• Design and implement integrations with GitHub, GitLab and CI/CD pipelines for automated security scanning and policy enforcement.
• Collaborate with development, DevOps, and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.
• Identify implementation challenges, integration dependencies, and performance impacts, providing practical risk mitigation solutions.
• Establish vulnerability management processes, including triage, risk prioritisation, exception handling, SLA definition, and remediation tracking.
• Develop technical standards, deployment procedures, runbooks, and governance to support long-term platform adoption.
• Provide hands-on support during implementation, testing, rollout, and post-go-live stabilization while mentoring teams.

Skills

DevSecOps

SAST

Security tooling

CI/CD

Stakeholder mgmt

Problem solving

Communication

Tools

Snyk

Fortify

Checkmarx

Veracode

Job description

• Lead the implementation and onboarding of Secure Code Scanning platforms such as Snyk, Fortify, Checkmarx, or Veracode across the software development lifecycle.
• Design and implement integrations with GitHub, GitLab and CI/CD pipelines to enable automated security scanning and policy enforcement.
• Collaborate with development, DevOps, and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.
• Proactively identify implementation challenges, integration dependencies, developer adoption issues, and performance impacts, and provide practical solutions to mitigate risks.
• Establish vulnerability management processes, including triage, risk prioritisation, exception handling, SLA definition, and remediation tracking.
• Develop technical standards, deployment procedures, operational runbooks, and governance processes to support long-term platform adoption.
• Provide hands‑on support during implementation, testing, rollout, and post‑go‑live stabilization activities while mentoring development teams on secure coding practices.

Key responsibilities:

• Lead the implementation and onboarding of Secure Code Scanning platforms such as Snyk, Fortify, Checkmarx, or Veracode across the software development lifecycle.
• Design and implement integrations with GitHub, GitLab and CI/CD pipelines to enable automated security scanning and policy enforcement.
• Collaborate with development, DevOps, and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.
• Proactively identify implementation challenges, integration dependencies, developer adoption issues, and performance impacts, and provide practical solutions to mitigate risks.
• Establish vulnerability management processes, including triage, risk prioritisation, exception handling, SLA definition, and remediation tracking.
• Develop technical standards, deployment procedures, operational runbooks, and governance processes to support long‑term platform adoption.
• Provide hands‑on support during implementation, testing, rollout, and post‑go‑live stabilization activities while mentoring development teams on secure coding practices.

Hybrid environment and flexible workingLong-term opportunity on transformation project

A successful Senior Application Security Engineer should have:

• Proven experience as an Application Security Engineer or DevSecOps Engineer in enterprise environments.
• Hands‑on experience implementing SAST tools such as Snyk, Fortify, Checkmarx, or Veracode.
• Strong knowledge of secure coding practices, application security, and SSDLC principles.
• Experience integrating security tooling into GitHub, GitLab, and CI/CD pipelines.
• Expertise in vulnerability management, remediation workflows, and risk prioritisation.
• Strong stakeholder engagement skills with the ability to work across Security, Development, and DevOps teams.
• Excellent problem‑solving abilities and a practical, delivery‑focused approach.
• Experience driving adoption of security controls and DevSecOps practices across development teams.
• Demonstrate experience implementating similar Application Security and Secure Coding solutions in larger enterprise environments
• Excellent communication skills to collaborate with technical teams.

Our client is a leading global technology consulting and services organisation that partners with enterprises to deliver large-scale digital transformation, cloud, cybersecurity, and technology modernisation initiatives. They offer a collaborative and innovative environment, providing opportunities to work on complex enterprise programs leveraging modern technologies and best‑practice delivery frameworks.

• Transformation project
• Hybrid environment and flexible working
• Long‑term opportunity with project
• Ability to upskill and work with security and AI