Senior Application Security Engineer

About the role

The Cyber Security Group of ASIC, Australia's financial markets regulator, is looking for an experienced Senior Application Security Engineer to join its Application Security Engineering team. The role provides ongoing application security support and guidance across the organisation, helping to lead product and application security initiatives and embed security throughout the software development and deployment lifecycle. It also supports the cyber assurance and cyber architecture functions and plays a key part in the Cyber Uplift Program. The position is permanent and full-time, with offices across Australia considered.

Key responsibilities

• Partner with application development teams to design secure solutions and embed security throughout the development lifecycle.
• Educate and advise developers on secure coding practices, including the use of ASIC's application security testing tools.
• Lead threat modelling and application architecture reviews to identify and address security risks.
• Define and guide secure architecture practices across applications, code repositories and development environments.
• Manage and coordinate penetration testing activities with technical teams and stakeholders.
• Champion DevSecOps and secure SDLC practices across development, engineering and support teams.
• Provide specialist guidance on secure AI design, including AI security risks, responsible AI principles and governance requirements.

Required profile

• Bachelor's degree in computer science or a related discipline, and/or at least five years of software development experience, with demonstrated application security engineering or a comparable security-focused role.
• Seasoned security engineering professional with a strong technical foundation in software development and a collaborative, proactive approach.
• Australian citizenship required; applicants must complete an ASIC Suitability and Baseline Assessment.

Required skills

• Practical experience securing CI/CD pipelines, automation processes and APIs.
• Hands-on experience with SAST, SCA, DAST and IAST.
• Proficiency in at least one programming or scripting language such as Java.NET, Python or JavaScript.
• Ability to assess, analyse and resolve complex technical and stakeholder issues.
• Certifications such as CSSLP or CISSP are highly regarded but not essential.

What we offer

• Salary from $154,355 to $176,927 depending on experience, plus 15.4% superannuation.
• 50/50 hybrid work-from-home model and flexible work arrangements.
• Additional leave entitlements, assistance for study and professional development.

Applications close at 11:59pm AEDT on Sunday 1 November 2026.