Senior Application Security Engineer – Hybrid & SDLC Leader

Australian Securities & Investments Commission; Australia; On-site; AUD 154,000 - 177,000; Full time

Benefits offered by this job

Hybrid work model

Flexible work arrangements

Additional leave entitlements

Superannuation

Job summary

Australian Securities & Investments Commission is seeking a Senior Application Security Engineer to lead security initiatives across the software development lifecycle. You will work closely with development teams to design secure solutions, educate engineers, and drive secure architectures and DevSecOps practices across the organisation.

You will oversee threat modelling, architecture reviews, and coordinate penetration testing while guiding secure AI design and governance to mitigate emerging

Qualifications

• Bachelor's degree in computer science or related discipline or equivalent
• 5+ years' software development experience with security focus
• Experience securing CI/CD pipelines, automation, APIs
• Hands-on with SAST, SCA, DAST, IAST
• Proficiency in Java, .NET, Python or JavaScript
• Security certifications (CSSLP, CISSP) highly regarded but not essential

Responsibilities

• Lead product and application security initiatives across the software development lifecycle
• Educate and advise developers on secure coding practices and tooling
• Lead threat modelling and architecture reviews to address security risks
• Define and guide secure architecture across applications, repositories and environments
• Coordinate penetration testing activities with relevant teams
• Champion DevSecOps and secure SDLC practices across teams
• Provide guidance on secure AI design, governance and emerging threats

Skills

Threat modelling

Secure SDLC

DevSecOps

Security architecture

Education

Bachelor's degree in computer science or related field

Tools

SAST

SCA

DAST

IAST

CI/CD tooling

Job description

Australian Securities & Investments Commission is seeking a Senior Application Security Engineer to lead security initiatives across the software development lifecycle. You will work closely with development teams to design secure solutions, educate engineers, and drive secure architectures and DevSecOps practices across the organisation.

You will oversee threat modelling, architecture reviews, and coordinate penetration testing while guiding secure AI design and governance to mitigate emerging