Senior DevSecOps Engineer — Secure CI/CD Architect

NCS Australia; City of Melbourne; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

NCS Australia is seeking a hands-on DevScope SME / Senior DevSecOps Engineer to drive the end-to-end design, implementation, and roll-out of application security scanning standards across enterprise engineering pipelines.

This delivery-focused role requires building and deploying SAST, SCA, and DAST tooling, integrating them into GitLab CI, GitHub Actions, Azure DevOps, or Jenkins, and working with Sydney-based teams with full Australian working rights.

Qualifications

• Proven Implementation Track Record: Demonstrated experience building, configuring, and deploying enterprise SAST, SCA, and DAST tooling (not just using or monitoring existing configurations).
• DevSecOps Automation: Strong hands-on experience integrating application security testing directly into automated CI/CD pipelines and developer tools.
• AppSec & Vulnerability Management: Deep understanding of the OWASP Top 10, CWE, open-source license risk, and dependency vulnerability management.
• Scripting & Integration: Proficiency in scripting (Python, Bash, or PowerShell) and working with APIs to automate scanning workflows and reporting.
• Location: Based in Sydney (or willing to work hybrid in Sydney) with full Australian working rights.

Responsibilities

• Platform Implementation & Roll-Out: Lead the end-to-end configuration, deployment, and integration of code scanning platforms across enterprise repositories.
• SAST, SCA & DAST Governance: Establish baseline rulesets, policy standards, and enforcement mechanisms for SAST, SCA, and DAST.
• Pipeline Security Automation: Embed automated security testing stages, quality gates, and failure conditions seamlessly into modern CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Azure DevOps, Jenkins).
• Dev Scope & Triage Strategy: Define the operational scope of security scanning, establish false-positive triage workflows, and optimize rulesets to minimize developer friction while maintaining high security coverage.
• Engineering Enablement: Work directly with software engineering squads to provide guided remediation, establish secure coding standards, and build developer‑first security.

Skills

DevSecOps automation

Scripting

CI/CD pipelines

OWASP Top 10 familiarity

Tools

Checkmarx

SonarQube

Veracode

Snyk

Fortify

OWASP ZAP

Job description

NCS Australia is seeking a hands-on DevScope SME / Senior DevSecOps Engineer to drive the end-to-end design, implementation, and roll-out of application security scanning standards across enterprise engineering pipelines.

This delivery-focused role requires building and deploying SAST, SCA, and DAST tooling, integrating them into GitLab CI, GitHub Actions, Azure DevOps, or Jenkins, and working with Sydney-based teams with full Australian working rights.