We’re looking for an Applications Security Engineer to join the Digital Engineering team.  

As our Application Security Engineer, you will lead and embed application security across our software development lifecycle (SDLC).  

About the role: 

• Ability to identify, escalate and advocate genuine threats clearly so that the business knows how to resolve them. 

• Track, Triage, investigate, and remediate application-related security incidents/vulnerabilities at scale across multiple software solutions 

• Maintain secure coding practices and security automation 

• Champion a “security-first” culture within development teams 

• Provide expertise on OWASP, SAST, DAST, and CI/CD security integration 

• Lead training initiatives and security awareness campaigns 

• Shape our security roadmap and incident response capabilities 

A bit about you: 

• Tertiary qualification in IT/ICT (desirable) 

• Certifications in application security (desirable) 

• 4+ years of experience in application security, secure coding, and DevSecOps at enterprise scale 

• Strong understanding of security tools, frameworks and standards (e.g. ISO27001, SOC2, GDPR) 

• Proven ability to embed security in CI/CD pipelines 

• Passion for mentoring and building cross-functional security capability 

• Experience with secure code reviews and scripting/development 

The Applications Security Engineer position description is available on the intranet.