Senior Application Security Lead: Secure SDLC & DevSecOps

Qantas Group; Sydney; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Travel discounts

Flexible leave

Rewards program

Wellbeing resources

Job summary

The Manager, Application Security at Qantas Group will lead Secure Software Development Lifecycle initiatives across the organization, partnering with engineering teams to embed secure-by-design and DevSecOps practices.

Based at Mascot Campus, this hands-on leadership role requires 5+ years in application security, cloud security and related fields, with the ability to influence without authority and translate risk into practical engineering decisions.

Qualifications

• 5+ years’ experience across application security, software engineering, cloud engineering or a related cyber security discipline.
• Hands-on experience securing software applications within large complex environments, supported by strong knowledge of SSDLC, secure-by-design and DevSecOps practices.
• Deep understanding of CI/CD pipelines and integrating application security capabilities into developer workflows.
• Experience with application security and engineering technologies, ideally including tools like GitHub Advanced Security, CrowdStrike and Qualys.
• Strong AWS and cloud security knowledge, with an understanding of application security frameworks and standards including OWASP, NIST and CIS.
• Experience leading security reviews, threat modelling and the assessment, prioritisation and remediation of application vulnerabilities.
• Demonstrated ability to influence without direct authority, build credibility with engineering teams and translate complex security risks into practical solutions that balance protection and delivery priorities

Responsibilities

• Lead application security reviews and threat modelling.
• Embed secure-by-design and DevSecOps into engineering workflows.
• Assess vulnerabilities and drive remediation.
• Evaluate new security tools and solutions.
• Partner with engineering, product and technology leaders to translate risks into practical steps.

Skills

Application security

Security reviews

Threat modelling

CI/CD security

AWS/cloud security

DevSecOps

Tools

GitHub Advanced Security

CrowdStrike

Qualys

Job description

The Manager, Application Security at Qantas Group will lead Secure Software Development Lifecycle initiatives across the organization, partnering with engineering teams to embed secure-by-design and DevSecOps practices.

Based at Mascot Campus, this hands-on leadership role requires 5+ years in application security, cloud security and related fields, with the ability to influence without authority and translate risk into practical engineering decisions.