Application Security Specialist - SAST, WAF, DAST

Position Overview

Join a premier financial services company located in Melbourne CBD as an Application Security Specialist. This permanent role offers a hybrid work arrangement and a competitive package between $180,000 and $185,000 plus benefits. You will be part of a high-performing cybersecurity team collaborating with respected industry professionals, influencing engineering teams, and advancing secure development practices within a modern technological framework.

Key Responsibilities

• Collaborate closely with software engineers and development teams to integrate security measures throughout the software development lifecycle.
• Offer expert guidance on secure coding techniques and uphold application security standards.
• Manage and enhance security testing operations, including both Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST).
• Assist in administrating Web Application Firewall (WAF) setups and other application security tools.
• Detect, evaluate, and mitigate risks and vulnerabilities pertaining to application security.
• Promote security awareness and elevate secure development skills among engineering teams.
• Contribute to shaping application security strategies, lead engineering initiatives, and support continuous improvement efforts.
• Remain informed about emerging cybersecurity threats, artificial intelligence technologies, and the latest security best practices.

Candidate Profile

The ideal candidate will have experience in areas such as application security, software engineering, secure development, security engineering, offensive security, or technical consulting.

• Proficiency with programming languages such as Node.js, JavaScript, or other development languages, with a preference for front-end experience.
• Strong ability to influence and guide developers and engineering teams.
• Hands-on knowledge of contemporary application development methodologies.
• Familiarity with secure development frameworks, testing approaches, and security tooling.
• An inquisitive mindset paired with initiative and a strong eagerness to learn.
• A collaborative, consultative approach to resolving problems.

Technical Expertise

• Experience with application security concepts and practices.
• Practical knowledge of SAST and DAST tools and processes.
• Competency managing Web Application Firewalls (WAF).
• Background in vulnerability management and securing the software development lifecycle (SDLC).
• Understanding of threat modeling, DevSecOps principles, and security engineering.

Benefits & Career Growth

• Opportunity to work with distinguished security specialists and professionals who have presented at major conferences such as Black Hat and DEF CON.
• Robust mentorship and career development pathways, including clear prospects to advance to Application Security Architect roles.
• Significant autonomy and ownership over projects.
• Access to advanced security tools and cutting-edge techniques.
• A collaborative and supportive team environment fostering growth and learning.
• Hybrid work schedule with office presence required 2-3 days per week.
• Professional development opportunities for continuous career advancement.

Additional Information

Australian Citizenship or Permanent Residency is preferred for this role. The employer is devoted to maintaining a diverse and inclusive workplace and accommodates special requirements throughout the recruitment process.

If you seek to deepen your application security technical skills and broaden your influence within engineering teams, your application is welcomed.