1 week ago

Application Security Engineer

ASX

Sydney

1 week ago

Apply

ASX is seeking an Application Security Engineer to join its Security Operations and Engineering team in Sydney. The role involves conducting application security reviews, supporting threat modelling, and driving remediation of vulnerabilities across critical market infrastructure. Candidates should have strong knowledge of secure coding practices and experience with AppSec tooling.

AI-enabledOn-siteFull-timeEntry LevelApplication SecuritySecure Coding

Application Security Engineer

Apply

AI-enabledOn-siteFull-timeEntry LevelApplication Security

Salary

Not specified

Work Location

Sydney, New South Wales, Australia, AU

Work Model

On-site

Employment Type

Full-time

Experience Level

Not Applicable

Core Qualifications

Technical (Must-have)

Application SecuritySecure CodingOWASP Top 10Secure Design PrinciplesSDLC Security ControlsDevSecOpsCI/CD Security IntegrationSASTDASTSCASecret ScanningContainer SecurityCloud SecurityThreat ModellingStakeholder Engagement

Soft Skills

AdaptabilityCommunicationMentoring

Preferred Qualifications

Technical (Nice-to-have)

CSSLPGWAPTGWEBOSWECISSPAI-assisted Security AnalysisSecure-by-DesignDevOpsJavaSecurity Champion Practices

Key Responsibilities

•Conduct targeted application security reviews and AI-assisted code analysis to identify exploitable vulnerabilities and structural weaknesses across priority applications.
•Prioritise, articulate and drive remediation of critical and high-severity code-level vulnerabilities in partnership with engineering teams.
•Support threat modelling, secure design reviews and application security assessments for priority applications and automation workflows.
•Adapt AppSec guidance to suit different engineering team maturity levels, balancing risk reduction, standardisation and delivery velocity.
•Provide practical secure coding guidance, remediation patterns and code-level recommendations to accelerate effective fixes.
•Raise, review or contribute to pull requests where appropriate to support timely remediation and knowledge transfer.
•Help define, refine and embed security checkpoints, guardrails and automation within the SDLC and CI/CD pipelines.
•Support optimisation of AppSec tooling, including SAST, DAST, SCA and related controls, so security testing is effective without unnecessarily impacting delivery velocity.
•Help establish or uplift Security Champion practices across delivery teams to sustain secure coding capability after the engagement.
•Produce handover documentation, reusable AppSec patterns and team enablement materials to support sustainable BAU ownership after the engagement.

Application SecurityCyber SecurityFinancial ServicesSecurities ExchangeSydneyFull-timeOn-siteDevSecOpsSASTDAST

Key Responsibilities

•Conduct targeted application security reviews and AI-assisted code analysis to identify exploitable vulnerabilities and structural weaknesses across priority applications.

•Prioritise, articulate and drive remediation of critical and high-severity code-level vulnerabilities in partnership with engineering teams.

•Support threat modelling, secure design reviews and application security assessments for priority applications and automation workflows.

•Adapt AppSec guidance to suit different engineering team maturity levels, balancing risk reduction, standardisation and delivery velocity.

•Provide practical secure coding guidance, remediation patterns and code-level recommendations to accelerate effective fixes.

•Raise, review or contribute to pull requests where appropriate to support timely remediation and knowledge transfer.

•Help define, refine and embed security checkpoints, guardrails and automation within the SDLC and CI/CD pipelines.

•Support optimisation of AppSec tooling, including SAST, DAST, SCA and related controls, so security testing is effective without unnecessarily impacting delivery velocity.

•Help establish or uplift Security Champion practices across delivery teams to sustain secure coding capability after the engagement.

•Produce handover documentation, reusable AppSec patterns and team enablement materials to support sustainable BAU ownership after the engagement.