Application Security Engineer - AppSec & DevSecOps
An Application Security Specialist joins a leading financial services firm's cyber security team in Melbourne (hybrid, 2-3 days in office), embedding security into the SDLC, guiding developers on secure coding, and running SAST/DAST, WAF and vulnerability management tooling, with a path toward Application Security Architecture.
- Compensation
- A$180K–A$185K / yr
- Location
- Melbourne VIC
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Full time
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Experience with technologies such as Node.js, JavaScript, or other development languages (ideally front end)
- Ability to influence developers and engineering teams
- Hands-on understanding of modern application development
- Exposure to secure development frameworks, testing methodologies and security tooling
- Curiosity, initiative, and a genuine desire to learn
- A collaborative, consulting style approach to problem solving
Nice to have
- Background in Application Security, Software Engineering, Secure Development, Security Engineering, Offensive Security, or Technical Consulting
- Experience with SAST (Static Application Security Testing)
- Experience with DAST (Dynamic Application Security Testing)
- Experience with Web Application Firewalls (WAF)
- Experience with Vulnerability Management
- Experience with Secure SDLC
- Experience with Threat Modelling
- Experience with DevSecOps
- Australian Citizenship or Permanent Residency
Full description
Salary: AUD 200000 - 220000 per annum, Learn, Grow & Great
**Application Security Specialist / Senior Application Security Engineer – AppSec & DevSecOps
📍 Melbourne CBD | Hybrid Working | Permanent Opportunity
💰 **$200K to $220k package
Leading Financial Services firm
Looking to take the next step in your Application Security career?
Join a high performing cyber security team where you will work alongside experienced security practitioners, partner closely with software engineers and help shape secure development practices across a modern technology environment.
This is a great opportunity for an Application Security Engineer or Specialist who understands how applications are built, enjoys working closely with developers and wants to continue building their expertise across secure software development, DevSecOps, offensive security and application security architecture.
What You Will Be Doing
- Partner with software engineers and development teams to embed security across the software development lifecycle
- Conduct application security reviews, threat modelling and security risk assessments
- Identify, assess and help remediate vulnerabilities across applications and APIs
- Provide practical guidance around secure coding and application security standards
- Support and optimise security testing processes including SAST and DAST
- Assist with Web Application Firewall (WAF) management and application security tooling
- Support DevSecOps and secure engineering practices
- Champion security awareness and help uplift secure development capability across engineering teams
- Contribute to application security initiatives, standards and continuous improvemen
- Stay current with emerging threats, AI technologies and modern security practices
About You
You could come from Application Security, Software Engineering, Secure Development, Security Engineering, Offensive Security or Technical Consulting.
Ideally, you will bring:
- Hands on experience across Application Security or secure software development
- A good understanding of how modern applications are designed and built
• Development experience with technologies such as Node.js, JavaScript or similar, ideally with front end development exposure
- Experience with API security, threat modelling and vulnerability management
- Exposure to SAST, DAST, WAF and other application security tooling
- Understanding of secure SDLC, DevSecOps and secure coding principles