{"id":962506,"url":"https://alion.io/job/ncs-australia-devsecops-sme-contract","title":"DevSecOps SME - Contract","company":{"id":6612,"name":"NCS Australia","domain":"ncs.com.au","url":"https://alion.io/company/ncs","size_band":null,"is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":5,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":31,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"contractor","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Melbourne, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure DevOps","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"CWE","optional":false},{"name":"Fortify","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Jenkins","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Veracode","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-09-16T00:35:26Z","employer_posted_date":"2026-09-16","last_verified_at":"2026-11-08T04:36:50Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":53},"description":"At NCS Australia, we believe in doing technology services better. Our commitment to quality, focus on people, and willingness to challenge traditional thinking set us apart. Our team brings this belief to life by partnering with our clients and communities to make tomorrow together.\nWe are committed to creating an environment that prioritises innovation, collaboration, and purposeful work. Our diverse team is empowered to make a meaningful impact with curiosity, creativity and resilience to shape better outcomes. Join us and accept the challenge of creating a better tomorrow.\n We are seeking a hands-on DevScope SME / Senior DevSecOps Engineer to drive the end-to-end design, implementation, and roll-out of application security scanning standards across enterprise engineering pipelines.\nThis is not an operational or monitoring position-it is a delivery-focused engineering role for a specialist who has built, integrated, and deployed SAST, SCA, and DAST platforms from the ground up. You will take ownership of defining security scanning boundaries (Dev Scope), establishing quality gates, configuring scanning engines, and automating security controls directly within active CI/CD pipelines.\nKey Responsibilities\nPlatform Implementation & Roll-Out: Lead the end-to-end configuration, deployment, and integration of code scanning platforms (e.g., Checkmarx, SonarQube, Veracode, Snyk, Fortify, or OWASP ZAP) across enterprise repositories.\n\nSAST, SCA & DAST Governance: Establish baseline rulesets, policy standards, and enforcement mechanisms for Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Dynamic Application Security Testing (DAST).\n\nPipeline Security Automation: Embed automated security testing stages, quality gates, and failure conditions seamlessly into modern CI/CD pipelines (e.g., GitLab CI, GitHub Actions, Azure DevOps, Jenkins).\n\nDev Scope & Triage Strategy: Define the operational scope of security scanning, establish false-positive triage workflows, and optimize rulesets to minimize developer friction while maintaining high security coverage.\n\nEngineering Enablement: Work directly with software engineering squads to provide guided remediation, establish secure coding standards, and build developer-first security\n\n Essential Experience:\nProven Implementation Track Record: Demonstrated experience building, configuring, and deploying enterprise SAST, SCA, and DAST tooling (not just using or monitoring existing configurations).\n\nDevSecOps Automation: Strong hands-on experience integrating application security testing directly into automated CI/CD pipelines and developer tools.\n\nAppSec & Vulnerability Management: Deep understanding of the OWASP Top 10, CWE, open-source license risk, and dependency vulnerability management.\n\nScripting & Integration: Proficiency in scripting (Python, Bash, or PowerShell) and working with APIs to automate scanning workflows and reporting.\n\nLocation: Based in Sydney (or willing to work hybrid in Sydney) with full Australian working rights.\n\n Why NCS?\nThis is a place for people who like to get stuck in, bring ideas to life and make things happen. You'll work alongside experienced people who care about what they do, contribute to meaningful work and have the support to keep learning and grow your career. Whether you want to deepen your expertise, explore something new or take your career in a different direction, there's room to make it your own. We value Adventure, Excellence, Integrity, Ownership and Unity - bringing curiosity, collaboration and accountability to the way we work with our clients and each other.\nReady to make extraordinary happen?\nWe'd love to hear from you.\nWe celebrate diversity and inclusion\nWe value different perspectives, experiences and strengths our people bring. We're committed to an inclusive workplace where everyone has the opportunity to contribute, grow and succeed, and to providing equal employment opportunities and reasonable adjustments throughout the recruitment process.\nImportant information\nApplicants will need valid Australian work rights and may be required to undergo relevant background, probity and police checks.\nAgencies: NCS accepts candidate submissions only from agencies on our preferred supplier panel through the NCS Agency Portal.","description_format":"text","description_chars":4313,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Australia","iso":"AU","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Managed Security","Managed IT Services (MSP)","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-09-16T11:28:48Z"}],"visa":[],"liveness":{"score":29,"band":"fade","label":"Fading","p_open":1,"p_active":0.649,"p_room":0.45,"age_days":53,"expected_fill_days":31,"reasons":["conf:1","velocity","win:tail"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/ncs-australia-devsecops-sme-contract","json_url":"https://alion.io/job/ncs-australia-devsecops-sme-contract.json","meta":{"generated_at":"2026-11-08T07:12:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15621,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6612},"rest":"https://alion.io/mcp/rest/get_company?id=6612"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fncs-australia-devsecops-sme-contract"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fncs-australia-devsecops-sme-contract"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fncs-australia-devsecops-sme-contract"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ncs-australia-devsecops-sme-contract\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fncs-australia-devsecops-sme-contract"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":962506}},{"tool":"search_jobs","arguments":{"company":"ncs.com.au","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":962506},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}