Senior AppSec Engineer: Secure Code Scanning & SDLC

ALOIS UK; Sydney; On-site; AUD 140,000 - 210,000; Full time

Job summary

ALOIS Australia is seeking a Senior Application Security Engineer to lead Secure Code Scanning implementation across the software development lifecycle from Sydney. You will onboard platforms such as Snyk, Fortify, Checkmarx, and Veracode, and integrate with GitHub, GitLab, and CI/CD pipelines to enforce security policies.

You will collaborate with development, DevOps, and security teams to shape scanning strategies, remediation workflows, and governance, mentoring teams on secure coding

Qualifications

• Extensive experience delivering application security in enterprise environments.
• Proficient with SAST tools, vulnerability management, and secure SDLC practices.
• Strong collaboration with DevOps, development teams and security stakeholders.

Responsibilities

• Lead onboarding of Secure Code Scanning platforms (Snyk, Fortify, Checkmarx, Veracode).
• Design integrations with GitHub, GitLab and CI/CD pipelines for automated security checks.
• Define scanning strategies, remediation workflows, and secure coding controls.
• Identify challenges, dependencies, adoption issues, and performance impacts; propose solutions.
• Establish vulnerability management processes including triage, SLAs, and remediation tracking.
• Develop deployment standards, runbooks, and governance for long-term adoption.
• Provide hands-on support during deployment, testing, rollout, and post-go-live stabilization.
• Mentor developers on secure coding practices and DevSecOps maturity.

Skills

Secure coding

DevSecOps

SAST

Vulnerability mgmt

CI/CD integration

Tools

Snyk

Fortify

Checkmarx

Veracode

GitHub

GitLab

Job description

ALOIS Australia is seeking a Senior Application Security Engineer to lead Secure Code Scanning implementation across the software development lifecycle from Sydney. You will onboard platforms such as Snyk, Fortify, Checkmarx, and Veracode, and integrate with GitHub, GitLab, and CI/CD pipelines to enforce security policies.

You will collaborate with development, DevOps, and security teams to shape scanning strategies, remediation workflows, and governance, mentoring teams on secure coding