Application Security Specialist - SAST, WAF, DAST

About the role

Join a high‑performing cyber security team at a leading financial services firm in Melbourne CBD. You will work closely with developers to embed security throughout the software development lifecycle and help shape secure development practices.

Key responsibilities

• Partner with software engineers to integrate security into the SDLC and provide guidance on secure coding.
• Support and optimise security testing processes, including SAST and DAST, and manage Web Application Firewall tooling.
• Identify, assess, and remediate application security risks and vulnerabilities.
• Champion security awareness and contribute to application security strategy and continuous improvement programs.

Required profile

• Background in application security, software engineering, secure development, security engineering, offensive security, or technical consulting.
• Ability to influence developers and engineering teams with a collaborative, consulting style.
• Curiosity, initiative, and a genuine desire to learn and grow.

Required skills

• Experience with Node.js, JavaScript or other front‑end development languages.
• Hands‑on knowledge of SAST, DAST, Web Application Firewalls (WAF), vulnerability management, secure SDLC, threat modelling, DevSecOps and security engineering.

What we offer

• Up to $180K AUD package inclusive of super, with flexibility.
• Hybrid working (2‑3 days in office) and strong professional development opportunities, including a pathway to Application Security Architecture.
• Mentoring from senior security specialists, exposure to advanced tools, and a supportive team culture.