Job Description

We are seeking a specialist Application Security Developer to join our enterprise cybersecurity and engineering organization in Sydney.

This role is specifically tailored for a practitioner who brings a strong software engineering background paired with deep application security expertise. You will spearhead our initiative to uplift secure code scanning capabilities and implement AI-assisted remediation workflows across our software development lifecycle (SDLC), ensuring that applications, microservices, and modern integrations are built securely by design.

Key Responsibilities

- Secure Code Scanning Uplift: Design, configure, and optimize enterprise static (SAST), dynamic (DAST), and dependency (SCA) code scanning capabilities to ensure robust coverage across all development squads.

- AI-Assisted Remediation: Pioneer the implementation of AI-driven tools and LLM-assisted workflows to automate vulnerability triage, accelerate code review, and provide developers with automated remediation guidance.

- Secure Coding & Remediation Guidance:



Review code, diagnose complex vulnerabilities (OWASP Top 10, CWE, LLM security risks), and partner directly with engineering squads to resolve security findings in modern languages (e.g., Python, Java, Go, Node.js/TypeScript).

- API Security & Identity Guardrails: Build secure application components and authentication/authorization controls, integrating seamlessly with enterprise identity platforms (Ping Identity, Entra ID) using OAuth 2.0, OIDC, and JWT validation.

- Pipeline Integration & Shift-Left: Embed security guardrails and automated scanning controls directly into up-to-date CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps) without hindering delivery velocity.

- Threat Modeling & Enablement: Conduct threat modeling assessments during feature design phases and create reusable security standards to foster a strong developer-first security culture.

📌 Application Security Developer (Sydney)
🏢 NCS Australia
📍 Sydney