1 month ago
Melbourne, AustraliaStaff+
Responsibilities
- Provide technical leadership and act as a senior subject matter expert for application security across ANZ.
- Lead application security reviews, threat modelling exercises, secure design assessments, secure code reviews, and application security assessments.
- Define secure coding standards, security patterns, engineering guidance, and enterprise application security approaches.
- Drive Secure by Design adoption and strengthen security outcomes across engineering teams.
- Lead security automation initiatives and integrate security controls into CI/CD pipelines.
- Establish approaches for SAST, SCA, secrets management, and application security tooling.
- Partner with engineering teams to enable secure software delivery.
- Coach and mentor Application Security Engineers and support capability development.
- Drive continuous improvement, including adoption of AI-powered application security technologies.
Requirements
- Deep expertise in application security principles, practices, and secure software development.
- Significant experience conducting complex secure code reviews and application security assessments.
- Strong knowledge of software vulnerabilities, exploit techniques, and remediation strategies.
- Expertise with OWASP Top 10, ASVS, SAMM, and NIST SSDF.
- Strong understanding of DevSecOps practices and CI/CD security.
- Experience securing cloud-native applications, APIs, and modern software architectures.
- Advanced scripting and automation skills.
- Ability to influence technical decisions and drive security outcomes across multiple teams.
- Experience using AI-assisted code review and vulnerability detection tools.
- Strong communication, stakeholder engagement, and mentoring capabilities.
- Highly regarded: container and Kubernetes security, Infrastructure as Code security, security architecture, threat intelligence, offensive security, and AI-enabled application security experience.
- Industry certifications such as CSSLP, CISSP, GWAPT, OSWE, GWEB, or equivalent are highly regarded.
Benefits
- Permanent, full-time role located in Melbourne or Brisbane.
- Flexible working arrangements.
- Access to health and wellbeing services.
- Discounts on selected ANZ products and services.
- Support for candidates requiring workplace or recruitment-process adjustments.
Tech Stack
Categories
About ANZ
ANZ (Australia and New Zealand Banking Group) is a publicly traded bank providing retail, commercial, private, wealth, and institutional banking services to consumers, businesses, and governments across Australia, New Zealand, and the Asia–Pacific. Headquartered in Melbourne and listed on the ASX, it is one of Australia’s big four banks and the largest banking group in New Zealand and the Pacific. Its revenue comes from lending interest, deposit spreads, payments, and service fees.