Senior AppSec Engineer: Secure Coding & DevSecOps Lead

Michael Page Australia; City of Melbourne; Hybrid; AUD 180,000 - 230,000; Full time

Benefits offered by this job

Hybrid working

Long-term transformation project

Job summary

Michael Page Australia is recruiting a Senior Application Security Engineer to lead secure coding implementations and integrations across enterprise DevSecOps environments. You will shape scanning strategies, mentor development teams on secure practices, and partner with Security, DevOps and Development squads.

You will drive onboarding of SAST tools (Snyk, Fortify, Checkmarx, Veracode) and define governance, runbooks, and remediation workflows while ensuring alignment with enterprise security

Qualifications

• Enterprise security engineering experience is required.
• Hands-on with SAST tools and secure SDLC.
• Experience integrating tooling into GitHub, GitLab and CI/CD pipelines.
• Strong knowledge of vulnerability management and remediation workflows.
• Excellent communication across Security, Development and DevOps teams.

Responsibilities

• Lead the implementation and onboarding of Secure Code Scanning platforms across the software development lifecycle.
• Design and implement integrations with GitHub, GitLab and CI/CD pipelines for automated security scanning and policy enforcement.
• Collaborate with development, DevOps, and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.
• Identify implementation challenges, integration dependencies, developer adoption issues, and performance impacts, providing practical solutions.
• Establish vulnerability management processes, including triage, risk prioritisation, SLA definition, and remediation tracking.
• Develop technical standards, deployment procedures, runbooks, and governance for long-term platform adoption.
• Provide hands-on support during implementation, testing, rollout, and stabilization while mentoring teams on secure coding.

Skills

DevSecOps

Secure coding

Security tooling

CI/CD integration

Stakeholder engagement

Tools

Snyk

Fortify

Checkmarx

Veracode

Job description

Michael Page Australia is recruiting a Senior Application Security Engineer to lead secure coding implementations and integrations across enterprise DevSecOps environments. You will shape scanning strategies, mentor development teams on secure practices, and partner with Security, DevOps and Development squads.

You will drive onboarding of SAST tools (Snyk, Fortify, Checkmarx, Veracode) and define governance, runbooks, and remediation workflows while ensuring alignment with enterprise security