Senior Application Security Engineer (Hybrid & Flexible)

ASIC; Melbourne; Hybrid; AUD 154,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Flexible work arrangements

Professional development support

Job summary

ASIC's Cyber Security Group seeks a Senior Application Security Engineer to lead securing applications across the organisation. You will partner with development teams to embed security in the software lifecycle, educate engineers on secure coding, and drive threat modelling and architecture reviews.

You will coordinate penetration testing and promote DevSecOps while addressing AI security risks. The role offers a permanent full-time position with a salary range of AUD 154,355 to 176,927 plus

Qualifications

• Bachelor's degree in computer science or related field and/or 5+ years in software development with application security focus
• Experience securing CI/CD pipelines, automation, and APIs
• Hands-on with SAST, SCA, DAST, IAST security testing methodologies/tools
• Proficiency in Java, .NET, Python or JavaScript
• Ability to assess complex technical and stakeholder issues using data and systems to inform outcomes
• Relevant security certifications (CSSLP, CISSP) highly regarded but not essential

Responsibilities

• Partner with development teams to design secure solutions and embed security across the SDLC
• Educate developers on secure coding and use of ASIC security tools
• Lead threat modelling and architecture reviews to address security risks
• Define secure architecture practices across apps, repos and environments
• Coordinate penetration testing activities with technical teams
• Champion DevSecOps and SDLC security across teams
• Provide guidance on secure AI design, risks and governance

Skills

CI/CD security

Secure coding

SAST/DAST/IAST

Programming languages

Threat modelling

Education

Bachelor's degree in CS

Tools

SAST tools

DAST/IAST tools

SCA

CI/CD tooling

Job description

ASIC's Cyber Security Group seeks a Senior Application Security Engineer to lead securing applications across the organisation. You will partner with development teams to embed security in the software lifecycle, educate engineers on secure coding, and drive threat modelling and architecture reviews.

You will coordinate penetration testing and promote DevSecOps while addressing AI security risks. The role offers a permanent full-time position with a salary range of AUD 154,355 to 176,927 plus