Senior Application Security Engineer

The role

As a Senior Application Security Engineer at ASIC, you will help to lead product and application security initiatives and embedding robust security practices across the software development and deployment lifecycle. Additionally, you will support the cyber assurance and cyber architecture functions and play a key role in delivering the Cyber Uplift Program.

More specifically, you will:

• Partner closely with application development teams to design secure solutions and embed security throughout software development practices and the broader development lifecycle.
• Educate and advise developers on secure coding practices, including the effective use of ASIC's application security testing tools and capabilities.
• Lead threat modelling and application architecture reviews to identify, assess and address security risks and threats throughout the design and development lifecycle.
• Support project delivery by defining and guiding secure architecture practices across applications, code repositories and development environments.
• Manage and coordinate penetration testing activities, including engagement with relevant technical teams and stakeholders.
• Champion DevSecOps and secure software development lifecycle (SDLC) practices across development, engineering and support teams to strengthen security by design.
• Provide` specialist guidance on secure AI design, including AI security risks and controls, responsible AI principles, governance requirements and emerging AI security threats.

About you

The ideal candidate for the Senior Application Security Engineer role at ASIC will be a seasoned security engineering professional with a strong technical foundation in software development and a collaborative mindset. They will bring a proactive approach to embedding security throughout the software development lifecycle and demonstrate leadership in driving secure engineering practices across the organisation.

In addition, you will have:

• A bachelor's degree in computer science or a related discipline and/or at least five years' software development experience, combined with demonstrated experience in application security engineering or a comparable security focused role.
• Demonstrated knowledge and practical experience in securing CI/CD pipelines, automation processes and APIs.
• Hands-on experience with application security testing methodologies and tools, including SAST, SCA, DAST and IAST.
• Proficiency in at least one relevant programming or scripting language, such as Java, .NET, Python or JavaScript.
• Demonstrated ability to assess, analyse and resolve complex technical and stakeholder related matters, drawing on relevant information sources, data, reporting, systems and databases to inform appropriate outcomes.
• Relevant security certifications such as Certified Secure Software Lifecycle Professional (CSSLP), Certified Information Systems Security Professional (CISSP), or equivalent secure coding or offensive security certifications are highly regarded but not essential.

Click ‘apply' to start your application. Applications will close at 11:59pm AEDT, Sunday 1 November 2026.