Senior DevSecOps Engineer

TheDriveGroup; Sydney; Hybrid; AUD 176,000 - 230,000; Full time

Job summary

TheDriveGroup is seeking a Senior DevSecOps Engineer for a Sydney-based hybrid, 6-month contract. You will design and implement application security scanning, lead rollouts of SAST, DAST and SCA, and embed automated security testing into development pipelines.

You will work with software and security teams to enhance secure coding practices, reduce false positives, and improve vulnerability triage across a large enterprise.

Qualifications

• Hands-on experience in DevSecOps or Application Security Engineering.
• Experience implementing SAST, DAST and SCA tooling.
• Experience with CI/CD tools: GitHub Actions, GitLab, Jenkins or Azure DevOps.
• Knowledge of OWASP Top 10 and secure development practices.

Responsibilities

• Design, configure and implement enterprise application security scanning tools.
• Lead the rollout of SAST, DAST and SCA capabilities.
• Integrate automated security testing into CI/CD pipelines.
• Establish security quality gates, scanning standards and policies.
• Develop automation using Python, Bash, PowerShell and APIs.
• Improve vulnerability triage processes and reduce false positives.
• Work directly with engineering teams to improve secure coding practices.

Skills

DevSecOps

Application Security

SAST

DAST

SCA tooling

CI/CD

GitHub Actions

GitLab

Jenkins

Azure DevOps

OWASP Top 10

Vulnerability management

Secure development practices

Automation scripting

Tools

Snyk

Checkmarx

SonarQube

Veracode

Fortify

OWASP ZAP

Job description

Senior DevSecOps Engineer

Location: Sydney – Hybrid

Employment: Contract - 6 months initially + extension opportunities

Rate: $1100 per day + GST

The opportunity

We're partnering with a leading enterprise organisation looking for an experienced DevSecOps SME to take ownership of the design, implementation and rollout of application security scanning capabilities.

This is a hands‑on engineering role where you'll have the opportunity to build and improve security practices across a large development environment.

You'll work closely with software engineering and security teams to introduce automated security testing, improve vulnerability detection and embed security directly into development pipelines.

What you'll be doing

• Design, configure and implement enterprise application security scanning tools.
• Lead the rollout of SAST, DAST and SCA capabilities.
• Integrate automated security testing into CI/CD pipelines.
• Establish security quality gates, scanning standards and policies.
• Develop automation using Python, Bash, PowerShell and APIs.
• Improve vulnerability triage processes and reduce false positives.
• Work directly with engineering teams to improve secure coding practices.

What we’re looking for

• Strong hands‑on experience in DevSecOps or Application Security Engineering.
• Proven experience implementing SAST, DAST and SCA tooling from the ground up.
• Experience with tools such as Snyk, Checkmarx, SonarQube, Veracode, Fortify or OWASP ZAP.
• Strong understanding of CI/CD environments, including GitHub Actions, GitLab, Jenkins or Azure DevOps.
• Good understanding of OWASP Top 10, vulnerability management and secure development practices.
• Experience automating security processes using scripting and APIs.

Why consider this opportunity?

An opportunity to take ownership of a significant security engineering uplift, introduce new capabilities and make a genuine impact on how software is developed and secured across an enterprise organisation.