Application Security Manager
Posted Updated
Summary
An Application Security Manager role in Melbourne (AUD ~220k) at a large enterprise client via recruiter TheDriveGroup. The hire owns appsec strategy: setting security standards, leading threat modelling and architecture reviews, embedding secure-by-design and DevSecOps in CI/CD pipelines, and driving vulnerability remediation with engineering teams.
Salary: 220000
Application Security Manager- Lead application security strategy, secure-by-design practices and DevSecOps improvements
- Own application security standards, architecture reviews and vulnerability remediation
- Influence security across a complex enterprise technology environment
This is an opportunity to influence how applications are designed, developed, tested and secured, working closely with Cyber Security, Architecture, Technology and Risk teams.
You'll lead the development of application security standards, oversee security assessments and testing, and help embed secure-by-design and DevSecOps practices across technology delivery.
The role combines technical application security expertise, stakeholder engagement and leadership, with the opportunity to improve security maturity across the organisation.
What you'll do
- Lead application security standards, secure design patterns and security control requirements.
- Drive the adoption of secure-by-design and DevSecOps practices across applications and delivery pipelines.
- Oversee application security assessments, threat modelling, architecture reviews and security testing.
- Identify application vulnerabilities, assess associated risks and coordinate remediation activities.
- Work closely with Software Engineering, Architecture and Technology teams to embed security throughout the development lifecycle.
- Provide technical leadership and guidance to security professionals and delivery partners.
- Collaborate with Cyber Defence and Vulnerability Management teams on application security risks and incidents.
- Report on application security risks, control gaps, remediation progress and security maturity.
- Strong experience in Application Security, Product Security, DevSecOps or Security Architecture within complex enterprise environments.
- Solid understanding of secure software development, SDLC security controls and application security testing.
- Experience conducting application security assessments, threat modelling and secure design reviews.
- Knowledge of OWASP, NIST, ISO 27001 and security best practices.
- Experience identifying application vulnerabilities and driving remediation with technical delivery teams.
- Ability to embed security requirements into software development processes and CI/CD pipelines.
- Strong stakeholder management skills, with the ability to translate technical security risks into practical business recommendations.
- Experience providing technical leadership, mentoring security professionals or coordinating external delivery partners.
Why join?
This is an opportunity to take ownership of an important security capability within a large enterprise environment.
You'll have the chance to:
- Shape application security standards and strategy, rather than simply maintain existing controls.
- Influence how security is integrated into application development and technology delivery.
- Work alongside experienced Cyber Security, Engineering and Architecture professionals.
- Drive meaningful improvements in application security maturity and risk management.
- Combine technical expertise with leadership and broader strategic influence.
For a confidential discussion, contact Hayley at hayley@thedrivegroup.com.au.
For the latest jobs, tech news or to introduce a friend for a $1,000 referral fee, follow us on LinkedIn:
https://www.linkedin.com/company/thedrivegroup
TheDriveGroup is 100% committed to improving meaningful diversity in the technology industry.
We partner with clients who embrace diversity and seek candidates across all backgrounds, abilities, genders, sexualities, cultures and faiths.