What's the role?

As a Senior Security Engineer within our Application Security team, you’ll engineer, integrate and operate application security capabilities across Westpac’s software development environments.

You’ll deliver scalable, automated security solutions embedded into development and DevOps platforms, helping engineering teams build and maintain secure software with greater speed and less friction. You’ll also provide practical security guidance and help strengthen application security practices across the Group. 

You will be responsible for - 

• Engineering, operating and maintaining application security platforms and tooling.
• Implementing automated code analysis, software composition analysis, secrets scanning and software supply-chain security capabilities.
• Integrating security controls into developer environments, GitHub repositories and CI/CD pipelines.
• Embedding automated security controls early in the software development lifecycle.
• Automating vulnerability identification, remediation and prevention at scale.
• Partnering with engineering and platform teams to deliver repeatable security outcomes.
• Providing practical application security guidance to developers and engineering teams.
• Supporting education and enablement initiatives that uplift secure development capability.

What do I need?

You’ll be an experienced security engineering professional with strong application security knowledge and the ability to develop automated, scalable security solutions.

Must-have technical skills

• Strong hands-on experience with security platforms such as Snyk, GitHub Advanced Security and Wiz.
• Strong working knowledge of GitHub and source-code security integrations.
• Engineering and scripting experience using Python.
• Strong DevOps experience, including integrating security controls into CI/CD pipelines and developer workflows.
• Experience across application security, security automation and vulnerability management.
• Understanding of secure software development and shift-left security practices.
• Security solution engineering and design experience. 

Preferred experience

• Experience working with AI or agentic development technologies.
• Experience in supply chain security and container security.
• Experience owning or supporting security platforms and services.
• Strong technical problem-solving and communication skills.
• Ability to provide practical guidance and security education to engineering teams.