Technical Product Owner: App & Container Security

Bendigobank; Sydney; Hybrid; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Flexible work options

Health insurance

Employee Assistance Program (EAP)

Corporate university BEN U

Gym membership discounts

Job summary

Bendigo Bank is seeking a Technical Product Owner to lead the strategy for application and container security. You will own the security toolchain—from SAST/DAST to container security—defining the vision and roadmap while guiding developers and platform engineers to build secure software from ground up.

You will drive DevSecOps practices, integrate security into CI/CD, and partner with risk/compliance to meet regulatory requirements, enabling secure, resilient applications at speed.

Qualifications

• Significant hands-on experience in application security and OWASP Top 10.
• Deep knowledge of container security principles and tooling (image scanning, runtime protection).
• Proven experience integrating security tools into CI/CD pipelines.
• Experience in a Product Owner or similar role with Agile backlog management.
• Familiarity with Australian financial services regulatory landscape is highly desirable.
• Excellent communication skills to explain technical concepts to non-technical stakeholders.
• Collaborative mindset and ability to empower developers to write secure code.
• Certifications such as CSSLP, GCSA, CKA/CKAD/CKS are highly regarded.

Responsibilities

• Define the product vision and roadmap for application and container security tools.
• Lead expert on secure coding and DevSecOps practices across engineering teams.
• Manage the full lifecycle of security tools from evaluation to operation; automate security testing.
• Partner with development, operations, and risk/compliance to ensure regulatory alignment.

Skills

Security expertise

Docker

Kubernetes

CI/CD security

DevSecOps

Agile

Tools

GitLab CI

Jenkins

CI/CD pipelines

Job description

Bendigo Bank is seeking a Technical Product Owner to lead the strategy for application and container security. You will own the security toolchain—from SAST/DAST to container security—defining the vision and roadmap while guiding developers and platform engineers to build secure software from ground up.

You will drive DevSecOps practices, integrate security into CI/CD, and partner with risk/compliance to meet regulatory requirements, enabling secure, resilient applications at speed.