Application Security Lead

Vor 6 Tagen


Melbourne, Österreich Buscojobs Vollzeit

UNSW UNSW is ranked 2nd in Australia and 27th in the world for Graduate Employability.
Browse our range of study options and find the perfect one for you.
View all jobs at UNSW Employment Type: full time continuing role as an Application Security Lead, UNSW ITStarting salary: $143,007 plus 17% superannuation and leave loadingLocation: UNSW Kensington Campus (Hybrid Working Opportunities)About UNSW: UNSW isn't like other places you've worked.
Yes, we're a large organisation with a diverse and talented community, a community doing extraordinary things.
Together, we are driven to be thoughtful, practical, and purposeful in all we do.
Taking this combined approach is what makes our work matter.
If you want a career where you can thrive, be challenged and do meaningful work, you're in the right place.
The Application Security Lead will play a crucial role in strengthening the organisation's security position by leading secure development lifecycle practices (SDLC).
This role will collaborate closely with the Cyber Security team and use expertise to develop and drive practices that embed secure-by-design across the full technology stack for applications.
This role leads application security compliance across the Student, Academic and Research domain.
The Application Security Lead role will lead the organisation with strong development processes and work with various teams and stakeholders to provide consultation and guidance across the business.
This includes promoting awareness of the University's internal and external environment for emerging cyber security threats and supporting the independent audits of cyber security controls.
This role reports into the Technology Manager and has no direct reports.
Specific accountabilities for this role include: Lead the development and implementation of application security best practice processes that ensure security throughout the application lifecycle.Provide expert guidance and leadership on secure development practices and technologies to IT teams and stakeholders across UNSW to embed security practices.Collaborate with the Cyber Security team to establish and advance sustainable secure coding processes, platforms, tools, monitoring, and automation including hands-on set-up and management of application security tooling.Lead a capability uplift and embed a culture of security across application teams through the development of standards, guidelines and identifying team needs and opportunities.Develop and deliver application development training with respect to security and guide the team autonomously on department strategy and approach.Mentor and support application development team to develop technical skills and ensure security compliance.Support the independent audit of cyber security controls on behalf of the University, including statutory audits completed by the Audit Office of NSW.Continually stay up to date and aware of legal, regulatory compliance and contractual obligations that are relevant to the University's management of cyber security risk.Promote awareness of the University's internal and external environment for emerging cyber security threats.Develop and improve metrics that drive security best practice and outcomes.Align with and actively demonstrate the UNSW Values in Action: Our Behaviours and the UNSW Code of Conduct.Cooperate with all health and safety policies and procedures of the university and take all reasonable care to ensure that your actions or omissions do not impact on the health and safety of yourself or others.Skills and Experience: Preferably 10+ years work experience in software engineering or related roles, at least 2 of which within a similar role focused on application security.In-depth understanding of the most common application security risks and demonstrated experience in secure development practices required to mitigate those risks (e.g., OWASP Top 10).Hands-on experience in designing, implementing, and managing secure software delivery pipelines by integrating application security tooling (such as SAST, DAST and dependency vulnerability management) into CI/CD pipelines.Understanding of architecture and security concerns specific to web technologies and frameworks (e.g., secure password storage, encryption, security headers, content security policy, CSRF, OIDC, oAuth2, hash algorithms, one-time codes, password reset, rate limiting, security logging, etc.
), API security and identity and authorisation standards.AWS and Azure security knowledge and experience desirable.Strong problem-solving and analytical skills, with the ability to translate data into valuable information for management.Strong cyber security GRC fundamentals and knowledge of cyber security principles and practices.Excellent understanding of industry-wide security standards and compliance frameworks such as ISO 27001, NIST 800-53, CSA, Essential 8, PCI DSS, COBIT 5, Mitre ATT&CK etc.Relevant industry certification(s) such as SANS certifications, CEH, OSCP, CompTIA Security+, and cloud platform certification.To Apply: If this is of interest to you, please submit your CV and Cover Letter which includes the responses to skills.
Applications close: Tuesday 14th of Jan at 11.30pm
Benefits and Culture: Flexible hybrid working.Additional 3 days of leave over the Christmas Period.Access to lifelong learning and career development.Progressive HR practices.Discounts and entitlements.UNSW is committed to equity diversity and inclusion.
Applications from women, people of culturally and linguistically diverse backgrounds, those living with disabilities, members of the LGBTIQ+ community; and people of Aboriginal and Torres Strait Islander descent, are encouraged.
UNSW provides workplace adjustments for people with disability, and access to flexible work options for eligible staff.
The University reserves the right not to proceed with any appointment.
#J-18808-Ljbffr


  • Security Team Leader

    vor 4 Wochen


    Melbourne, Österreich Challenger Security Vollzeit

    Join Our Team at Challenger Security: Where Safety Meets Luxury About Us: At Challenger Security, we're more than just a security company – we're a team of dedicated individuals committed to safeguarding our clients across Australia.As an ISO accredited industry leader, we specialise in providing top-tier security services for high-end luxury retail,...

  • Security Team Leader

    vor 4 Wochen


    Melbourne, Österreich Challenger Security Vollzeit

    Join Our Team at Challenger Security: Where Safety Meets Luxury About Us: At Challenger Security, we're more than just a security company – we're a team of dedicated individuals committed to safeguarding our clients across Australia.As an ISO accredited industry leader, we specialise in providing top-tier security services for high-end luxury retail,...

  • Security Team Leader

    vor 4 Wochen


    Melbourne, Österreich Challenger Security Vollzeit

    Join Our Team at Challenger Security: Where Safety Meets LuxuryAbout Us:At Challenger Security, we're more than just a security company – we're a team of dedicated individuals committed to safeguarding our clients across Australia. As an ISO accredited industry leader, we specialise in providing top-tier security services for high-end luxury retail,...


  • Melbourne, Österreich Buscojobs Vollzeit

    UNSW UNSW is ranked 2nd in Australia and 27th in the world for Graduate Employability.Browse our range of study options and find the perfect one for you.View all jobs at UNSW Employment Type: full time continuing role as an Application Security Lead, UNSW ITStarting salary: $143,007 plus 17% superannuation and leave loadingLocation: UNSW Kensington Campus...


  • Melbourne, Österreich Pepperstone Vollzeit

    The Pepperstone story started in 2010.We know what it's like to trade the world's markets.Our team describes us as a place for the curious and the driven, and we like to do things a little differently; as a transformative global fintech we're digital, nimble, connected, and united in our vision to create a better way to trade.We thrive on progress – for...


  • Melbourne, Österreich Tideri Jobbörse Vollzeit

    The Pepperstone story started in 2010.We know what it's like to trade the world's markets.Our team describes us as a place for the curious and the driven, and we like to do things a little differently; as a transformative global fintech we're digital, nimble, connected, and united in our vision to create a better way to trade.We thrive on progress – for...


  • Melbourne, Österreich Pepperstone Eu Limited Vollzeit

    The Pepperstone story started in 2010. We know what it's like to trade the world's markets. Our team describes us as a place for the curious and the driven, and we like to do things a little differently; as a transformative global fintech we're digital, nimble, connected, and united in our vision to create a better way to trade.We thrive on progress – for...


  • Melbourne, Österreich Pepperstone Eu Limited Vollzeit

    The Pepperstone story started in 2010.We know what it's like to trade the world's markets.Our team describes us as a place for the curious and the driven, and we like to do things a little differently; as a transformative global fintech we're digital, nimble, connected, and united in our vision to create a better way to trade.We thrive on progress – for...


  • Melbourne, Österreich Clearcompany Vollzeit

    ABOUT THE ROLE:Join our Information Security team and play a pivotal role in driving the Application Security function at Wilson Group.In this role, you will support the Information Security Manager by addressing application security-related issues, ensuring seamless assistance for Wilson staff, and maintaining the health and performance of our cyber...


  • Melbourne, Österreich Clearcompany Vollzeit

    ABOUT THE ROLE:Join our Information Security team and play a pivotal role in driving the Application Security function at Wilson Group.In this role, you will support the Information Security Manager by addressing application security-related issues, ensuring seamless assistance for Wilson staff, and maintaining the health and performance of our cyber...


  • Melbourne, Österreich Clearcompany Vollzeit

    ABOUT THE ROLE:Join our Information Security team and play a pivotal role in driving the Application Security function at Wilson Group.In this role, you will support the Information Security Manager by addressing application security-related issues, ensuring seamless assistance for Wilson staff, and maintaining the health and performance of our cyber...


  • Melbourne, Österreich Amazon Vollzeit

    In Amazon Stores, we ship some of the widest arrays of technology found at any company. From amazon.com to world class machine learning pipelines, from cutting-edge digital healthcare to no-checkout retail, we push the boundaries of technology in every direction using the globe's largest AWS deployment.As an AppSec engineer, you will collaborate with...


  • Melbourne, Österreich Tal Vollzeit

    TAL Tailor your cover to suit your needs.Life, Income, TPD, Critical Illness.Get a Quote for flexible insurance products built by you, for you. View all jobs at TAL From the millions of Australians we protect, to those that make it happen every day at TAL, people really are what we're all about.We want to grow with you.Achieve with you.And support you to do...


  • Melbourne, Österreich Wilson Group Vollzeit

    Company: Wilson Parking Australia 1992 Pty LtdApplication Security Engineer ABOUT THE ROLE: Join our Information Security team and play a pivotal role in driving the Application Security function at Wilson Group.In this role, you will support the Information Security Manager by addressing application security-related issues, ensuring seamless assistance for...


  • Melbourne, Österreich Wilson Group Vollzeit

    Company: Wilson Parking Australia 1992 Pty LtdApplication Security Engineer ABOUT THE ROLE: Join our Information Security team and play a pivotal role in driving the Application Security function at Wilson Group.In this role, you will support the Information Security Manager by addressing application security-related issues, ensuring seamless assistance for...


  • Melbourne, Österreich Tideri Jobbörse Vollzeit

    The Pepperstone story started in 2010.We know what it's like to trade the world's markets.Our team describes us as a place for the curious and the driven, and we like to do things a little differently; as a transformative global fintech we're digital, nimble, connected, and united in our vision to create a better way to trade.We thrive on progress – for...


  • Melbourne, Österreich Wilson Group Vollzeit

    Company: Wilson Parking Australia 1992 Pty LtdApplication Security EngineerABOUT THE ROLE:Join our Information Security team and play a pivotal role in driving the Application Security function at Wilson Group.In this role, you will support the Information Security Manager by addressing application security-related issues, ensuring seamless assistance for...


  • Melbourne, Österreich Tideri Jobbörse Vollzeit

    ABOUT THE ROLE:Join our Information Security team and play a pivotal role in driving the Application Security function at Wilson Group.In this role, you will support the Information Security Manager by addressing application security-related issues, ensuring seamless assistance for Wilson staff, and maintaining the health and performance of our cyber...


  • Melbourne, Österreich Buscojobs Vollzeit

    This job offer is not available in your country.About us We are Protecht - a fast growth Governance, Risk & Compliance (GRC) SaaS business.We provide world-class enterprise risk management, compliance, training, and advisory services to over 350 customers across various industry sectors through our offices across APAC, USA & Europe.Our cloud-based SaaS...


  • Melbourne, Österreich Advanced Personnel Management Vollzeit

    Add expected salary to your profile for insightsAPM is recruiting for an Application Security Engineer, reporting into the Head of Cyber Security – APAC.This role can be based in any of our tech hubs across Perth, Sydney, Melbourne, Geelong or Brisbane.The role is responsible for improving the security of internal applications by identifying and mitigating...