Senior AppSec Engineer - Hybrid & Long-Term Growth

Michael Page; Sydney; Ibrido; AUD 140.000 - 200.000; Tempo pieno

Vantaggi offerti da questo lavoro

Hybrid work environment

Transformation project

Upskill with security and AI

Descrizione del lavoro

Michael Page is seeking a Senior Application Security Engineer to lead secure code scanning initiatives and build integration with GitHub, GitLab, and CI/CD pipelines. You will define scanning strategies, remediation workflows, and governance to enable rapid, secure software delivery.

You will collaborate with development, DevOps, and security teams to drive adoption of secure coding practices, manage vulnerabilities, and mentor engineers across enterprise programs.

Competenze

• Proven experience as an Application Security Engineer or DevSecOps Engineer in enterprise environments.
• Hands-on experience implementing SAST tools such as Snyk, Fortify, Checkmarx, or Veracode.
• Strong knowledge of secure coding practices, application security, and SSDLC principles.
• Experience integrating security tooling into GitHub, GitLab, and CI/CD pipelines.
• Expertise in vulnerability management, remediation workflows, and risk prioritisation.
• Strong stakeholder engagement skills with the ability to work across Security, Development, and DevOps teams.
• Excellent problem-solving abilities and a practical, delivery-focused approach.
• Experience driving adoption of security controls and DevSecOps practices across development teams.

Mansioni

• Lead the implementation and onboarding of Secure Code Scanning platforms across the software development lifecycle.
• Design and implement integrations with GitHub, GitLab and CI/CD pipelines for automated security scanning and policy enforcement.
• Collaborate with development, DevOps, and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.
• Identify implementation challenges, integration dependencies, and performance impacts, providing practical risk mitigation solutions.
• Establish vulnerability management processes, including triage, risk prioritisation, exception handling, SLA definition, and remediation tracking.
• Develop technical standards, deployment procedures, runbooks, and governance to support long-term platform adoption.
• Provide hands-on support during implementation, testing, rollout, and post-go-live stabilization while mentoring teams.

Conoscenze

DevSecOps

SAST

Security tooling

CI/CD

Stakeholder mgmt

Problem solving

Communication

Strumenti

Snyk

Fortify

Checkmarx

Veracode

Descrizione del lavoro

Michael Page is seeking a Senior Application Security Engineer to lead secure code scanning initiatives and build integration with GitHub, GitLab, and CI/CD pipelines. You will define scanning strategies, remediation workflows, and governance to enable rapid, secure software delivery.

You will collaborate with development, DevOps, and security teams to drive adoption of secure coding practices, manage vulnerabilities, and mentor engineers across enterprise programs.