Senior DevSecOps Engineer — Secure CI/CD Architect

NCS Group Australia; Sydney; Hybrid; AUD 150,000 - 210,000; Full time

Job summary

NCS Australia is seeking a hands-on DevScope SME / Senior DevSecOps Engineer to drive the end-to-end design, implementation, and roll-out of application security scanning standards across enterprise pipelines. This delivery-focused engineering role will own setting security scanning boundaries, quality gates, and automating security controls within CI/CD pipelines.

Based in Sydney with hybrid work, you will deploy SAST, SCA, and DAST tooling (Checkmarx, SonarQube, Veracode, Snyk, Fortify, OWASP

Qualifications

• Proven implementation of enterprise SAST, SCA and DAST tooling.
• Hands-on DevSecOps automation within CI/CD pipelines.
• Deep understanding of OWASP Top 10, CWE and vulnerability management.

Responsibilities

• Lead end-to-end configuration, deployment and integration of code scanning platforms across enterprise repos.
• Establish baseline rulesets, policy standards and enforcement for SAST, SCA and DAST.
• Embed automated security testing stages and quality gates into CI/CD pipelines.
• Define the Dev Scope, triage workflows and optimize rulesets to minimize friction while maintaining coverage.
• Collaborate with software squads to enable secure coding practices and developer enablement.

Skills

CI/CD integration

Scripting

AppSec knowledge

Vulnerability mgmt

Collaboration

Tools

Checkmarx

SonarQube

Veracode

Snyk

Fortify

OWASP ZAP

Job description

NCS Australia is seeking a hands-on DevScope SME / Senior DevSecOps Engineer to drive the end-to-end design, implementation, and roll-out of application security scanning standards across enterprise pipelines. This delivery-focused engineering role will own setting security scanning boundaries, quality gates, and automating security controls within CI/CD pipelines.

Based in Sydney with hybrid work, you will deploy SAST, SCA, and DAST tooling (Checkmarx, SonarQube, Veracode, Snyk, Fortify, OWASP