Application Security Technical Lead

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Application Security Technical Lead based in Australia.

This is a hands-on leadership opportunity to own and continuously improve application security across a diverse technology environment.

You will operate an established Application Security capability while ensuring security practices are embedded effectively throughout the software development lifecycle.

Working across multiple applications and engineering teams, you will tailor security approaches to different levels of technical and security maturity.

The role combines secure code review, threat modelling, security assessments, vulnerability management, and DevSecOps practices.

You will take ownership of AppSec tooling and help integrate effective security testing into CI/CD pipelines without compromising delivery velocity.

A key part of the role will be developing security awareness through Security Champions, developer mentoring, and secure coding practices.

This is an ideal opportunity for an experienced application security professional who enjoys balancing technical depth, risk, collaboration, and continuous improvement.

Accountabilities:

• Own and operate application security practices across the full software development lifecycle.
• Identify, assess, prioritise, and manage application security risks while partnering with Engineering teams to drive effective remediation.
• Conduct secure code reviews, primarily across C#, .NET, and web applications, and promote secure development practices.
• Lead threat modelling exercises and security assessments across applications, development workflows, and automation processes.
• Adapt application security practices to different team maturity levels, balancing risk reduction, standardisation, and delivery requirements.
• Own, operate, and continuously optimise SAST, DAST, and SCA tooling across CI/CD pipelines.
• Establish effective security testing practices that provide strong assurance without unnecessarily slowing engineering delivery.
• Maintain visibility of application vulnerabilities, establish appropriate prioritisation, and provide clear security reporting.
• Define, maintain, and apply secure design and secure development standards across engineering teams.
• Establish and support Security Champions within development teams to strengthen security ownership.
• Mentor developers and help uplift secure coding knowledge and application security capability across the organisation.
• Engage effectively with technical and business stakeholders to communicate security risks, priorities, and recommendations.

Requirements:

• 5+ years of experience in software engineering, including at least 2 years working in an application security role.
• Strong practical experience with DevSecOps principles and CI/CD environments.
• Hands-on experience implementing and managing Application Security tools, including SAST, DAST, and SCA solutions.
• Strong experience working with Microsoft Azure environments and Azure DevOps pipelines.
• Comfortable performing secure code reviews across C#, .NET, and modern web applications.
• Strong understanding of the OWASP Top 10, secure software development, and secure design principles.
• Experience working across multiple applications, teams, or platforms with varying levels of application security maturity.
• Ability to adapt security strategies according to risk, technical complexity, team maturity, and delivery context.
• Strong analytical and problem-solving skills, with the ability to translate technical security risks into practical remediation actions.
• Self-driven, accountable, and comfortable taking ownership of an established security capability.
• Strong stakeholder engagement and communication skills, with the ability to influence engineering teams and build collaborative relationships.
• A continuous improvement mindset and willingness to mentor others and share application security knowledge.

Benefits:

• Opportunity to own and run a mature Application Security capability.
• Exposure to a diverse application landscape and multiple engineering teams.
• Opportunity to work in an environment with a strong focus on cybersecurity and secure software development.
• Culture that values continuous improvement, learning, and knowledge sharing.
• Balance of working from home and office-based collaboration.
• Inclusive working environment that welcomes people with diverse backgrounds, experiences, skills, and perspectives.
• Recruitment process adjustments available to support accessibility needs.