Senior AppSec Engineer — Hybrid & DevSecOps Leader

ASIC; Brisbane; Hybride; AUD 154 000 - 177 000; Plein temps

Avantages offerts par ce poste

Attractive superannuation

Additional leave entitlements

50/50 hybrid work-from home model

Flexible work arrangements

Assistance for study and professional 

Résumé du poste

ASIC's Cyber Security Group is seeking a Senior Application Security Engineer to join the Application Security Engineering team to provide ongoing application security support and guidance across the organisation.

You will lead secure coding practices, threat modelling and secure architecture reviews, coordinate penetration testing, champion DevSecOps across the SDLC, and provide specialist guidance on secure AI design.

Qualifications

• Bachelor's degree in computer science or a related discipline.
• At least five years' software development experience with application security engineering.
• Experience securing CI/CD pipelines, automation processes and APIs.
• Hands-on with SAST, SCA, DAST and IAST testing methodologies.
• Proficiency in Java, .NET, Python or JavaScript.

Responsabilités

• Collaborate with development teams to design secure solutions and embed security across the lifecycle.
• Educate developers on secure coding and use of application security testing tools.
• Lead threat modelling and architecture reviews to address security risks throughout development.
• Define secure architecture practices across applications and development environments.
• Coordinate penetration testing activities with technical teams and stakeholders.
• Champion DevSecOps and secure SDLC practices across teams to strengthen security by design.
• Provide guidance on secure AI design, AI security risks and controls.

Connaissances

CI/CD security

Secure coding practices

Threat modelling

AI security

Appsec testing tools

Programming languages (Java, .NET, Py,

Formation

Bachelor's degree in computer science or related discipline

Outils

SAST tooling

SCA tooling

DAST tooling

IAST tooling

Description du poste

ASIC's Cyber Security Group is seeking a Senior Application Security Engineer to join the Application Security Engineering team to provide ongoing application security support and guidance across the organisation.

You will lead secure coding practices, threat modelling and secure architecture reviews, coordinate penetration testing, champion DevSecOps across the SDLC, and provide specialist guidance on secure AI design.