Title: Application Security Engineer

Location: Sydney

Contract: 6 Months

:

- Lead the implementation and onboarding of Secure Code Scanning platforms such as Snyk, Fortify, Checkmarx, or Veracode across the software development lifecycle.

- Design and implement integrations with GitHub, GitLab and CI/CD pipelines to enable automated security scanning and policy enforcement.

- Collaborate with development, DevOps, and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.

- Proactively identify implementation challenges, integration dependencies, developer adoption issues, and performance impacts, and provide practical solutions to mitigate risks.

- Establish vulnerability management processes, including triage, risk prioritization, exception handling,



SLA definition, and remediation tracking.

- Develop technical standards, deployment procedures, operational runbooks, and governance processes to support long-term platform adoption.

- Provide hands-on support during implementation, testing, rollout, and post-go-live stabilization activities while mentoring development teams on secure coding practices.

- Demonstrated experience implementing similar Application Security and Secure Coding solutions in large enterprise environments, with robust knowledge of SAST, vulnerability management, SDLC, and DevSecOps practices.

📌 Application Security Engineer (Sydney)
🏢 CareCone Group
📍 Sydney