Senior DevSecOps Engineer: Secure CI/CD Architect

NCS Australia

Sydney

Hybrid

AUD 140,000 - 200,000

Full time

3 days ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

NCS Australia is seeking a hands-on DevScope SME / Senior DevSecOps Engineer to drive end-to-end design, deployment, and rollout of application security scanning standards across enterprise pipelines in Sydney. You will own security boundaries, establish gates, configure engines, and automate controls within CI/CD.

This is a delivery-focused engineering role, requiring experience building and deploying SAST, SCA, and DAST tooling.

Qualifications

Proven implementation track record of enterprise SAST, SCA, and DAST tooling.
Hands-on DevSecOps automation integrating into automated CI/CD pipelines and developer tools.
Deep understanding of the OWASP Top 10, CWE, open-source risk, and dependency vulnerability management.
Scripting in Python, Bash, or PowerShell with API-based workflow automation.

Responsibilities

Platform Implementation & Roll-Out: Lead end-to-end configuration, deployment, and integration of code scanning platforms across enterprise repositories.
SAST, SCA & DAST Governance: Establish baseline rulesets, policy standards, and enforcement mechanisms.
Pipeline Security Automation: Embed automated security testing stages and quality gates into CI/CD pipelines.
Dev Scope & Triage Strategy: Define security scanning scope, triage workflows, and optimize rulesets.
Engineering Enablement: Collaborate with engineering squads to guide remediation and secure coding standards.