Senior Application Security Leader (DevSecOps)

Qantas Airways; Sydney; On-site; AUD 140,000 - 200,000; Full time

Benefits offered by this job

Employee benefits program

Job summary

Qantas Airways is seeking a hands-on Manager, Application Security to strengthen the Group's cyber posture. You will influence engineering teams to embed secure-by-design practices and DevSecOps capabilities, leading reviews, threat modelling and vulnerability remediation across the portfolio.

You will work closely with software engineers, architects, product teams and technology leadership to translate risks into practical, timely security solutions while balancing delivery priorities.

Qualifications

• 5+ years’ experience across application security, software engineering, cloud engineering or related cyber security.
• Hands-on experience securing software applications within large complex environments with SSDLC, secure-by-design and DevSecOps.
• Deep understanding of CI/CD pipelines and integrating SAST, DAST, software composition analysis and secrets detection into developer workflows.
• Experience with GitHub Advanced Security, CrowdStrike and Qualys.
• Strong AWS and cloud security knowledge, with familiarity with OWASP, NIST and CIS.
• Experience leading security reviews, threat modelling and remediation of vulnerabilities.
• Ability to influence without direct authority and translate risks into practical solutions.

Responsibilities

• Lead application security reviews and threat modelling activities.
• Assess vulnerabilities and drive remediation with prioritisation.
• Champion Secure SDLC, secure-by-design and DevSecOps practices.
• Provide technical leadership across the Group to engineers, architects and product teams.
• Evaluate new security tools and integrate them into pipelines.

Skills

Application security

DevSecOps

SAST

DAST

GitHub Advanced Security

CrowdStrike

Qualys

AWS security

Threat modelling

Influence without authority

Tools

GitHub Advanced Security

CrowdStrike

Qualys

Job description

Qantas Airways is seeking a hands-on Manager, Application Security to strengthen the Group's cyber posture. You will influence engineering teams to embed secure-by-design practices and DevSecOps capabilities, leading reviews, threat modelling and vulnerability remediation across the portfolio.

You will work closely with software engineers, architects, product teams and technology leadership to translate risks into practical, timely security solutions while balancing delivery priorities.