Senior DevSecOps Engineer: Secure CI/CD Architect

NCS Group; Sydney; Hybrid; AUD 150,000 - 210,000; Full time

Job summary

NCS Australia is seeking a hands-on DevScope SME / Senior DevSecOps Engineer to drive the end-to-end design, implementation, and roll-out of application security scanning standards across enterprise pipelines.

This delivery-focused role requires building and deploying SAST, SCA, and DAST platforms, defining security gates, and embedding automated testing within CI/CD pipelines (GitLab, GitHub Actions, Azure DevOps, Jenkins). Based in Sydney with Australian work rights.

Qualifications

• Proven track record implementing enterprise SAST, SCA and DAST tooling.
• Hands-on ability to embed security testing into CI/CD pipelines.
• Deep understanding of OWASP Top 10 and vulnerability management.
• Scripting proficiency and API-based automation for scanning workflows.

Responsibilities

• Lead end-to-end platform implementation and rollout of code scanning tools.
• Define baseline rulesets and enforcement for SAST/SCA/DAST.
• Embed automated security stages and quality gates in CI/CD pipelines.
• Define Dev Scope, triage false positives, and minimize developer friction.
• Collaborate with engineering squads to enable secure coding practices.

Skills

DevSecOps

CI/CD integration

Scripting

Automation

Tools

Checkmarx

SonarQube

Veracode

Snyk

Fortify

OWASP ZAP

GitLab CI

GitHub Actions

Azure DevOps

Jenkins

Job description

NCS Australia is seeking a hands-on DevScope SME / Senior DevSecOps Engineer to drive the end-to-end design, implementation, and roll-out of application security scanning standards across enterprise pipelines.

This delivery-focused role requires building and deploying SAST, SCA, and DAST platforms, defining security gates, and embedding automated testing within CI/CD pipelines (GitLab, GitHub Actions, Azure DevOps, Jenkins). Based in Sydney with Australian work rights.