Senior DevSecOps Engineer - Secure CI/CD & AppSec

XPT Software Australia; Sydney; On-site; AUD 150,000 - 190,000; Full time

Job summary

XPT Software Australia is seeking an experienced DevSecOps specialist to design and implement secure CI/CD solutions for the Cybersecurity team in Sydney. You will embed AppSec testing and vulnerability management across the SDLC, delivering secure pipelines and reusable security controls.

The role requires 6-8 years in DevSecOps or related fields, with hands-on experience in GitLab CI/CD, Argo CD/GitOps and SAST tooling, and a strong ability to collaborate with security, architecture,

Qualifications

• 6-8 years of DevSecOps, cybersecurity or platform-engineering experience.
• Hands-on with GitLab CI/CD, Argo CD/GitOps and SAST tooling.
• Design secure pipelines, reusable security controls and quality gates.
• Embed application-security testing and vulnerability management across the SDLC.
• Provide solution designs, technical guidance and implementation support.
• Strong knowledge of AppSec, automation, policy-as-code and secure-by-design principles.
• Ability to collaborate with security, architecture, development and platform teams.

Responsibilities

• Design and implement secure CI/CD pipelines for the Cybersecurity team.
• Develop reusable security controls and quality gates.
• Embed AppSec testing and vulnerability management across the SDLC.
• Provide solution designs, technical guidance and implementation support.
• Collaborate with security, architecture, development and platform teams.

Skills

GitLab CI/CD

Argo CD/GitOps

SAST tooling

AppSec

Automation

Policy-as-code

Secure-by-design

Vulnerability management

SDLC security testing

Cross-functional collaboration

Job description

XPT Software Australia is seeking an experienced DevSecOps specialist to design and implement secure CI/CD solutions for the Cybersecurity team in Sydney. You will embed AppSec testing and vulnerability management across the SDLC, delivering secure pipelines and reusable security controls.

The role requires 6-8 years in DevSecOps or related fields, with hands-on experience in GitLab CI/CD, Argo CD/GitOps and SAST tooling, and a strong ability to collaborate with security, architecture,