Senior AppSec Engineer: DevSecOps & Secure SDLC (Hybrid)

Peoplebank; City of Melbourne; Hybrid; AUD 180,000 - 185,000; Full time

Benefits offered by this job

Benefits package

Hybrid work arrangement

Job summary

Peoplebank is hiring an Application Security Specialist/Senior Engineer in Melbourne’s CBD, offering hybrid work and a $180K–$185K package plus benefits. You will partner with engineering teams to embed security across the SDLC, perform threat modelling and security risk assessments, and guide developers on secure coding and standards.

The role covers SAST/DAST testing, WAF management, and security tooling, with strong focus on DevSecOps and secure engineering practices.

Qualifications

• Hands-on experience in application security or secure software development.
• Understanding of how modern applications are designed and built.
• Experience with API security, threat modelling and vulnerability management.
• Exposure to SAST, DAST, WAF and other application security tooling.

Responsibilities

• Embed security across the software development lifecycle with engineers.
• Conduct application security reviews, threat modelling and security risk assessments.
• Identify, assess and help remediate vulnerabilities across applications and APIs.
• Provide practical guidance around secure coding and application security standards.
• Support and optimise security testing processes including SAST and DAST.
• Assist with Web Application Firewall (WAF) management and application security tooling.
• Support DevSecOps and secure engineering practices.
• Champion security awareness and uplift secure development capability across engineering teams.
• Contribute to application security initiatives, standards and continuous improvement.

Skills

Application Security

DevSecOps

Threat Modelling

SAST

DAST

WAF

Secure Coding

Security Architecture

Job description

Peoplebank is hiring an Application Security Specialist/Senior Engineer in Melbourne’s CBD, offering hybrid work and a $180K–$185K package plus benefits. You will partner with engineering teams to embed security across the SDLC, perform threat modelling and security risk assessments, and guide developers on secure coding and standards.

The role covers SAST/DAST testing, WAF management, and security tooling, with strong focus on DevSecOps and secure engineering practices.