Senior AppSec Engineer (DevSecOps) | Hybrid Melbourne

Peoplebank; Melbourne; Híbrido; AUD 200.000 - 220.000; Jornada completa

Descripción de la vacante

Peoplebank, in Melbourne CBD, seeks an Application Security Specialist / Senior Application Security Engineer for a permanent hybrid role with a $200k–$220k package plus super. You will help shape secure development practices across a modern technology environment.

You will partner with engineers, perform threat modelling and security reviews, and guide secure coding. The role covers DevSecOps, API security, SAST/DAST tooling and staying ahead of threats.

Formación

• Hands-on experience across Application Security or secure software development.
• Understanding of modern application design and build processes.
• Development experience in Node.js or JavaScript, with some front-end exposure.
• Experience with API security, threat modelling and vulnerability management
• Exposure to SAST, DAST, WAF and other application security tooling
• Knowledge of secure SDLC and DevSecOps principles
• Ability to influence developers and engineering teams effectively
• Strong communication and consulting style
• Curiosity and drive to develop technically

Responsabilidades

• Partner with engineers to embed security across the SDLC.
• Conduct application security reviews, threat modelling and risk assessments.
• Identify, assess and remediate vulnerabilities in applications and APIs.
• Provide guidance on secure coding and security standards.
• Support security testing processes including SAST and DAST.
• Assist with WAF management and security tooling.
• Promote DevSecOps and secure engineering practices.
• Champion security awareness across engineering teams.
• Stay current with emerging threats and AI in security.

Conocimientos

Application Security

Node.js

JavaScript

Threat Modelling

SAST/DAST tools

DevSecOps

Communication skills

Herramientas

WAF

Descripción del empleo

Peoplebank, in Melbourne CBD, seeks an Application Security Specialist / Senior Application Security Engineer for a permanent hybrid role with a $200k–$220k package plus super. You will help shape secure development practices across a modern technology environment.

You will partner with engineers, perform threat modelling and security reviews, and guide secure coding. The role covers DevSecOps, API security, SAST/DAST tooling and staying ahead of threats.