- Lead the implementation and onboarding of Secure Code Scanning platforms such as Snyk, Fortify, Checkmarx, or Veracode across the software development lifecycle.
- Design and implement integrations with GitHub, GitLab and CI/CD pipelines to enable automated security scanning and policy enforcement.
- Collaborate with development, DevOps, and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.
- Proactively identify implementation challenges, integration dependencies, developer adoption issues, and performance impacts, and provide practical solutions to mitigate risks.
- Establish vulnerability management processes, including triage, risk prioritisation, exception handling, SLA definition, and remediation tracking.
- Develop technical standards, deployment procedures, operational runbooks, and governance processes to support long-term platform adoption.
- Provide hands‑on support during implementation, testing, rollout, and post‑go‑live stabilization activities while mentoring development teams on secure coding practices.

Key responsibilities

- Lead the implementation and onboarding of Secure Code Scanning platforms such as Snyk, Fortify, Checkmarx, or Veracode across the software development lifecycle.
- Design and implement integrations with GitHub, GitLab and CI/CD pipelines to enable automated security scanning and policy enforcement.
- Collaborate with development, DevOps,



and security teams to define scanning strategies, remediation workflows, quality gates, and secure coding controls.
- Proactively identify implementation challenges, integration dependencies, developer adoption issues, and performance impacts, and provide practical solutions to mitigate risks.
- Establish vulnerability management processes, including triage, risk prioritisation, exception handling, SLA definition, and remediation tracking.
- Develop technical standards, deployment procedures, operational runbooks, and governance processes to support long-term platform adoption.
- Provide hands‑on support during implementation, testing, rollout, and post‑go‑live stabilization activities while mentoring development teams on secure coding practices.

Hybrid setting and flexible workingLong-term opportunity on transformation project

Our client is a leading global technology consulting and services organisation that partners with enterprises to deliver large-scale digital transformation, cloud, cybersecurity, and technology modernisation initiatives. They offer a collaborative and innovative environment, providing opportunities to work on complex enterprise programs leveraging modern technologies and best-practice delivery frameworks.

- Transformation project
- Hybrid environment and flexible working
- Long-term opportunity with project
- Ability to upskill and work with security and AI

#J-18808-Ljbffr

📌 Senior Application Security Engineer (Sydney)
🏢 Michael Page
📍 Sydney