Job description: Senior Application Security Engineer – Secure Code Scanning
Implementation
Lead the implementation and onboarding of Secure Code Scanning
platforms such as Snyk, Fortify, Checkmarx, or Veracode across the
software development lifecycle.
Design and implement integrations with GitHub, GitLab and CI/CD
pipelines to enable automated security scanning and policy enforcement.
Collaborate with development, DevOps, and security teams to define
scanning strategies, remediation workflows, quality gates, and secure
coding controls.
Proactively identify implementation challenges, integration dependencies,
developer adoption issues, and performance impacts, and provide practical
solutions to mitigate risks.
Establish vulnerability management processes, including triage,
risk prioritization,



exception handling, SLA definition, and remediation
tracking.
Develop technical standards, deployment procedures, operational
runbooks, and governance processes to support long-term platform adoption.
Provide hands-on support during implementation, testing, rollout,
and post-go-live stabilization activities while mentoring development
teams on secure coding practices.
Demonstrated experience implementing similar Application Security
and Secure Coding solutions in large enterprise settings, with solid
knowledge of SAST, vulnerability management, SDLC, and DevSecOps
practices.

📌 Senior Application Security Engineer Sydney
🏢 Important Group
📍 Sydney