Senior AppSec Lead: SAST/SCA & GitLab Rollout

Zoho; Sydney; On-site; AUD 150,000 - 190,000; Full time

Job summary

XPT Software Australia Pty Ltd in Sydney is seeking a Senior SME-App Security engineer to own the technical design, standards and hands-on delivery of SAST/SCA capabilities across GitLab SaaS and GitLab On-Prem. This role spans secure SDLC design, vulnerability management, architecture reviews and developer enablement, focused on a single initiative for its duration.

The candidate will define the target architecture, establish scanning policies, and align security controls with OWASP ASVS and

Qualifications

• Senior level with 8+ years in application security / secure software engineering.
• 4–5+ years hands-on with SAST/SCA tooling and architecture review.
• Strong knowledge of SDLC security, threat modeling and secure design.

Responsibilities

• Own the design, standards and delivery of SAST/SCA across GitLab SaaS and On-Prem.
• Define target-state architecture and scanning policy, thresholds and gates.
• Review pipelines for security issues and mentor engineering teams.
• Provide technical input for vendor evaluation and BA-authored requirements.

Skills

SAST

SCA

AppSec

CI/CD

GitLab CI

Threat modeling

Vulnerability management

Communication

Tools

GitLab SAST

GitLab Dependency Scanning

OWASP ASVS

Job description

XPT Software Australia Pty Ltd in Sydney is seeking a Senior SME-App Security engineer to own the technical design, standards and hands-on delivery of SAST/SCA capabilities across GitLab SaaS and GitLab On-Prem. This role spans secure SDLC design, vulnerability management, architecture reviews and developer enablement, focused on a single initiative for its duration.

The candidate will define the target architecture, establish scanning policies, and align security controls with OWASP ASVS and