Security Engineer – Application Security

About the role

As an Application Security Engineer in ANZ’s Application Security Engineering Squad, you will help keep the bank’s digital services safe by ensuring that applications are built with security in mind. You will work closely with development teams to identify risks, improve security practices and drive the adoption of DevSecOps across the enterprise.

Key responsibilities

• Perform secure code reviews and software composition analysis (SCA) for a range of applications.
• Analyse security tool outputs, source code and configuration files to detect vulnerabilities.
• Provide practical remediation guidance and secure‑coding recommendations to engineering teams.
• Integrate, manage and automate application security tooling within CI/CD pipelines.
• Collaborate with stakeholders to embed security controls throughout the software development lifecycle.
• Support the maturity and adoption of DevSecOps practices across the organisation.
• Stay up‑to‑date with emerging threats, technologies and best‑practice security standards.

Required profile

• Foundational knowledge of application security concepts and secure software development.
• Experience or exposure to security testing tools such as SAST and SCA.
• Ability to assess security findings and communicate clear remediation steps.
• Strong collaboration skills to work with engineers and business stakeholders.

Required skills

• Application security
• Secure software development practices
• Static Application Security Testing (SAST)
• Software Composition Analysis (SCA)
• Secure code review
• DevSecOps
• Security tooling integration in CI/CD pipelines