Senior Application Security Engineer — Hybrid & Flexible Role

ASIC; Canberra; Hybrid; AUD 154,000 - 177,000; Full time

Benefits offered by this job

Attractive superannuation

Additional leave entitlements

50/50 hybrid work-from home model

Flexible work arrangements

Assistance for study and professional

Job summary

ASIC's Cyber Security Group is seeking a Senior Application Security Engineer to lead secure development practices across the software lifecycle. You will collaborate with development teams to design secure solutions, educate on secure coding, and drive threat modelling and security reviews across projects.

You will coordinate penetration testing, promote DevSecOps, and provide guidance on secure AI design to address emerging threats.

Qualifications

• Bachelor's degree in computer science or related field; 5+ years' software development experience.
• Experience in application security engineering or similar role.
• Knowledge securing CI/CD pipelines, automation and APIs.
• Hands-on with SAST, SCA, DAST and IAST.
• Proficiency in Java, .NET, Python or JavaScript.
• Security certifications such as CSSLP or CISSP are highly regarded but not essential.

Responsibilities

• Partner with development teams to design secure solutions and embed security throughout the software development lifecycle.
• Educate and advise developers on secure coding practices and use of ASIC's testing tools.
• Lead threat modelling and architecture reviews to address security risks across the lifecycle.
• Define and guide secure architecture practices across applications, code repositories and environments.
• Manage and coordinate penetration testing activities with technical teams and stakeholders.
• Champion DevSecOps and secure SDLC practices across teams to strengthen security by design.
• Provide guidance on secure AI design, including AI security risks and controls.

Skills

Security engineering

CI/CD security

Threat modelling

Secure coding

Penetration testing

Education

Bachelors in CS

Tools

SAST

SCA

DAST

IAST

Job description

ASIC's Cyber Security Group is seeking a Senior Application Security Engineer to lead secure development practices across the software lifecycle. You will collaborate with development teams to design secure solutions, educate on secure coding, and drive threat modelling and security reviews across projects.

You will coordinate penetration testing, promote DevSecOps, and provide guidance on secure AI design to address emerging threats.