{"id":3060177,"url":"https://alion.io/job/ncs-australia-application-security-developer","title":"Application Security Developer","company":{"id":6612,"name":"NCS Australia","domain":"ncs.com.au","url":"https://alion.io/company/ncs","size_band":null,"is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure DevOps","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CWE","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Node JS","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Ping Identity","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Veracode","optional":false},{"name":"Azure","optional":true},{"name":"LLM Guardrails","optional":true}],"status":"live","first_seen_at":"2026-10-22T04:42:32Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-23T01:10:15Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"At NCS Australia, we believe in doing technology services better. Our commitment to quality, focus on people, and willingness to challenge traditional thinking set us apart. Our team brings this belief to life by partnering with our clients and communities to make tomorrow together.\nWe are committed to creating an environment that prioritises innovation, collaboration, and purposeful work. Our diverse team is empowered to make a meaningful impact with curiosity, creativity and resilience to shape better outcomes. Join us and accept the challenge of creating a better tomorrow.\n We are seeking an Application Security Developer to join our enterprise cybersecurity and engineering organization in Sydney.\nThis is a developer-first AppSec role designed for a hands-on practitioner who blends a software engineering background with expertise in application security principles, API security, and secure coding standards. Working embedded alongside software engineering squads and cross-functional security teams (CIAM, DevSecOps, Vulnerability Management), you will ensure that applications, microservices, and AI integrations are built securely by design throughout the software development lifecycle (SDLC).\nKey Responsibilities\nSecure Coding & Remediation: Review code, diagnose vulnerabilities (OWASP Top 10, CWE, OWASP Top 10 for LLMs), and provide developer-level code remediation guidance in modern languages (e.g., Python, Java, Go, Node.js/TypeScript).\n\nAPI Security & Identity Guardrails: Design, build, and extend secure application components, authentication/authorization modules, and API security controls-aligning with enterprise identity platforms (Ping Identity, Entra ID) using OAuth 2.0, OIDC, and JWT validation.\n\nAutomated Security Pipeline Integration: Integrate and fine-tune static (SAST), dynamic (DAST), and dependency (SCA) code scanning tools into modern CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps).\n\nThreat Modeling & Secure Design: Conduct threat modeling assessments during feature design phases and perform targeted manual secure code reviews for high-risk application components, external endpoints, and API gateways.\n\nVulnerability Triage & Exposure Remediation: Partner with enterprise Vulnerability Management teams to triage application security findings (e.g., Tenable WAS, DAST results), validate exploitable flaws, and guide squads on effective remediation strategies.\n\nDeveloper Security Enablement: Create reusable security libraries, establish secure coding baselines, and empower software engineering teams to adopt \"shift-left\" security practices without slowing down delivery velocity.\n\n Essential Experience:\nSoftware Engineering Background: Proven track record as a Software Developer or Application Security Developer writing clean, production-ready code in modern development stacks (e.g., Python, Java, Go, JavaScript/TypeScript).\n\nApplication & API Security Mastery: Deep technical understanding of web/API security, OWASP vulnerabilities, cryptography, and secure authentication/authorization protocols (OAuth 2.0, OIDC, SAML).\n\nPipeline Security & Code Scanning: Practical experience configuring, tuning, and embedding SAST, SCA, and DAST tooling (e.g., Snyk, Checkmarx, SonarQube, Veracode, OWASP ZAP) into automated CI/CD workflows.\n\nThreat Modeling: Practical capability in conducting threat modeling (e.g., STRIDE) and converting security risks into clear engineering user stories and backlog items.\n\nLocation: Sydney-based (hybrid) with full Australian working rights.\n\nDesirable:\nExposure to secure AI/LLM integration patterns, prompt security guardrails, or model risk controls.\n\nExperience interfacing with enterprise identity platforms (e.g., Ping Identity, Entra ID) or enterprise vulnerability management platforms (Tenable).\n\nRelevant industry certifications (CSSLP, GWAPT, GWEB, OSCP, or CASE).\n\n Why NCS?\nThis is a place for people who like to get stuck in, bring ideas to life and make things happen. You'll work alongside experienced people who care about what they do, contribute to meaningful work and have the support to keep learning and grow your career. Whether you want to deepen your expertise, explore something new or take your career in a different direction, there's room to make it your own. We value Adventure, Excellence, Integrity, Ownership and Unity - bringing curiosity, collaboration and accountability to the way we work with our clients and each other.\nReady to make extraordinary happen?\nWe'd love to hear from you.\nWe celebrate diversity and inclusion\nWe value different perspectives, experiences and strengths our people bring. We're committed to an inclusive workplace where everyone has the opportunity to contribute, grow and succeed, and to providing equal employment opportunities and reasonable adjustments throughout the recruitment process.\nImportant information\nApplicants will need valid Australian work rights and may be required to undergo relevant background, probity and police checks.\nAgencies: NCS accepts candidate submissions only from agencies on our preferred supplier panel through the NCS Agency Portal.","description_format":"text","description_chars":5137,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Australia","iso":"AU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Managed Security","Managed IT Services (MSP)","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-22T05:59:25Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":31,"reasons":["conf:0","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/ncs-australia-application-security-developer","json_url":"https://alion.io/job/ncs-australia-application-security-developer.json","meta":{"generated_at":"2026-10-23T03:23:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5597,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6612},"rest":"https://alion.io/mcp/rest/get_company?id=6612"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fncs-australia-application-security-developer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fncs-australia-application-security-developer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fncs-australia-application-security-developer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ncs-australia-application-security-developer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fncs-australia-application-security-developer"}]}