Lead Engineer – Application Security

About the role

ANZ is looking for a Lead Engineer to drive application security across its technology landscape. You will provide technical leadership on complex security initiatives, set engineering standards and mentor security professionals within one of Australia’s leading banks.

Key responsibilities

• Act as senior subject‑matter expert for application security across the organisation.
• Lead security reviews, threat‑modeling and secure design assessments for critical projects.
• Define and maintain secure coding standards, security patterns and engineering guidance.
• Promote Secure‑by‑Design principles and embed security controls into CI/CD pipelines.
• Conduct advanced secure code reviews and application security assessments.
• Drive security automation, including SAST, SCA, secrets management and tooling integration.
• Partner with engineering teams to improve security outcomes and enable secure software delivery.
• Coach and mentor Application Security Engineers, fostering capability development.
• Explore and adopt AI‑powered application security technologies.

Required profile

• Extensive experience in application security and secure software development.
• Proven track record of leading complex secure code reviews and security assessments.
• Deep knowledge of common software vulnerabilities, exploit techniques and remediation strategies.
• Strong understanding of DevSecOps practices and CI/CD security.
• Experience securing cloud‑native applications, APIs and modern architectures.
• Advanced scripting and automation capabilities.

Required skills

• Application security principles and secure coding standards.
• OWASP Top 10, ASVS, SAMM, NIST SSDF.
• DevSecOps and CI/CD pipeline security.
• SAST, SCA, secrets management tooling.
• Cloud‑native application security and API protection.
• Scripting and automation (e.g., Python, Bash).
• AI‑enabled security technologies.