Senior Application Security Engineer — DevSecOps & AI Security Lead

ASIC; Adelaide; Hybrid; AUD 154,000 - 177,000; Full time

Benefits offered by this job

50/50 hybrid work-from-home model

Flexible work arrangements

Assistance for study and professional

Job summary

ASIC’s Cyber Security Group is seeking a Senior Application Security Engineer to join the Application Security Engineering team to provide ongoing security support across the organisation. You will lead security initiatives, embed secure practices in the software development lifecycle, and collaborate with development teams to design secure solutions.

You will educate developers on secure coding, lead threat modelling and architecture reviews, and coordinate penetration testing while championing

Qualifications

• Bachelor's degree in computer science or related discipline.
• At least five years of software development experience with application security.
• Experience securing CI/CD pipelines, automation processes and APIs.
• Proficiency in at least one programming language (Java, .NET, Python or JavaScript).

Responsibilities

• Lead product and application security initiatives across the software development lifecycle.
• Educate developers on secure coding practices and use of security testing tools.
• Lead threat modelling and application architecture reviews to identify and address security risks.
• Manage and coordinate penetration testing activities and secure architecture practices.

Skills

Security engineering

CI/CD security

Application security testing

Secure coding practices

Education

Bachelor's degree in Computer Science or related discipline

Tools

SAST

SCA

DAST

IAST

Job description

ASIC’s Cyber Security Group is seeking a Senior Application Security Engineer to join the Application Security Engineering team to provide ongoing security support across the organisation. You will lead security initiatives, embed secure practices in the software development lifecycle, and collaborate with development teams to design secure solutions.

You will educate developers on secure coding, lead threat modelling and architecture reviews, and coordinate penetration testing while championing