Staff Application Security Engineer (Remote, Australia)

Jobgether • Australia

Remote

Apply Now

AI Summary

Establish and scale a dedicated application security function in a high-growth tech environment, combining deep security expertise with hands-on software engineering to protect customers from fraud and abuse. Design secure SDLC practices, lead threat modeling, and integrate AI-powered security tooling into CI/CD pipelines. Drive vulnerability remediation, secure coding standards, and influence engineering practices across APIs, SDKs, and cloud systems.

Key Highlights

Build and scale an application security function from the ground up in a high-growth tech company

Combine senior security engineering with hands-on software development to harden complex systems

Integrate AI-powered security tools into CI/CD pipelines and drive vulnerability remediation at scale

Key Responsibilities

Design and implement a secure SDLC, incorporating threat modeling, secure code reviews, and pre-release testing into engineering workflows

Own and improve application security tooling (SAST/DAST, SCA, secrets detection, container scanning) and integrate them into CI/CD pipelines

Develop AI-first security engineering approaches, including AI-assisted vulnerability triage, automated remediation, and security review agents

Lead threat modeling and architecture security reviews for APIs, SDKs, and cloud-based systems, focusing on fraud and abuse mitigation

Manage vulnerability identification, risk assessment, prioritization, and remediation across scanners, penetration tests, and bug bounty reports

Conduct hands-on security testing (manual code review, exploitation testing) for authentication, authorization, API vulnerabilities, and business-logic flaws

Collaborate with engineering teams to mentor Security Champions, provide secure coding guidance, and expand security expertise organization-wide

Define application security logging, alerting, and incident response processes, coordinating with cloud and infrastructure teams

Support compliance initiatives (e.g., SOC 2, ISO 27001) by implementing operational security controls

Interested in remote work opportunities in Cyber Security? Discover Cyber Security Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.

Technical Skills Required

Application Security Software Engineering (TypeScript/JavaScript/Go/Python) Threat Modeling and Secure Code Reviews

Benefits & Perks

Annual base salary ranging from $177,000 to $240,000 (AUD)

Fully remote work environment (subject to geographic restrictions)

Significant technical autonomy and executive-level support for security initiatives

Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.

Nice to Have

Experience in fraud detection, bot mitigation, or identity security

Cloud security knowledge (AWS IAM, secrets management, workload identity)

Familiarity with client-side application security (browser security, mobile SDK hardening)

Multi-tenant SaaS platform or high-volume API security experience

Bug bounty program management (HackerOne, Bugcrowd)

AI/ML security risks (prompt injection, model vulnerabilities) or autonomous penetration testing

Job Description

Help establish and scale a dedicated application security function within a high-growth technology environment where protecting customers against fraud and abuse is a core priority. As a senior individual contributor, you will combine deep security expertise with hands-on software engineering to identify vulnerabilities, strengthen development workflows, and build practical security tooling. You will design secure software development practices, lead threat modeling and security reviews, and drive vulnerability remediation across complex APIs, SDKs, and cloud-based systems. Working closely with engineering teams and security leadership, you will integrate AI-powered tools into security testing and remediation while maintaining rigorous quality standards. This role offers substantial technical autonomy, opportunities to influence engineering practices across the organization, and the chance to solve challenging security problems at scale. You will help make security an integral part of product development rather than a separate compliance requirement.

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.