Senior DevSecOps Engineer: Secure CI/CD & AppSec Automation

XPT Software; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

XPT Software is seeking an experienced DevSecOps specialist to design and implement secure CI/CD solutions for the Cybersecurity team in Sydney. You will design secure pipelines, embed security testing across the SDLC and provide hands-on guidance and implementation support to cross-functional teams.

Required are 6–8 years in DevSecOps or related fields, with strong GitLab CI/CD, Argo CD/GitOps and SAST tooling experience, and a solid understanding of AppSec, automation and policy-as-code

Qualifications

• Experience in DevSecOps, cybersecurity or platform-engineering.
• Hands-on use of GitLab CI/CD, Argo CD/GitOps and SAST tooling.
• Design secure pipelines, reusable security controls and quality gates.
• Embed application-security testing and vulnerability management across the SDLC.
• Provide solution designs, technical guidance and implementation support.
• Strong knowledge of AppSec, automation, policy-as-code and secure-by-design principles.
• Ability to collaborate with security, architecture, development and platform teams.

Responsibilities

• Design and implement secure CI/CD solutions for the Cybersecurity team.
• Develop secure pipelines with quality gates and reusable controls.
• Embed application security testing and vulnerability management across the SDLC.
• Provide solution designs, guidance and hands-on implementation support.

Skills

DevSecOps experience

Security architecture

Automation

Policy as code

Secure-by-design

SDLC security

Cross-functional collaboration

AppSec

GitOps

Tools

GitLab CI/CD

Argo CD

SAST tooling

Job description

XPT Software is seeking an experienced DevSecOps specialist to design and implement secure CI/CD solutions for the Cybersecurity team in Sydney. You will design secure pipelines, embed security testing across the SDLC and provide hands-on guidance and implementation support to cross-functional teams.

Required are 6–8 years in DevSecOps or related fields, with strong GitLab CI/CD, Argo CD/GitOps and SAST tooling experience, and a solid understanding of AppSec, automation and policy-as-code