Senior Consultant, Application Security

CyberCX is seeking a Senior Security Consultant – Application Security to join our Security Testing & Assurance (STA) practice.

As a senior member of the Application Security team, you will lead the delivery of complex application security engagements, provide technical leadership across CyberCX, and help organisations strengthen their software assurance and secure development capabilities.

You will play a key role in shaping CyberCX's Application Security strategy, mentoring consultants across the business, and partnering with customers to build secure software development practices that reduce risk and improve resilience.

Key Responsibilities

• Deliver complex Application Security engagements including threat modelling, Secure SDLC assessments, secure code reviews, DevSecOps reviews and software assurance activities.
• Provide technical leadership and subject matter expertise for Application Security services across CyberCX.
• Support the development and execution of CyberCX's Application Security strategy and service offerings.
• Build trusted relationships with customers and identify opportunities to expand Application Security capabilities within existing and new engagements.
• Lead workshops, presentations and executive discussions with customers to communicate findings, risks, recommendations and remediation strategies.
• Partner with Customer Sales and Customer Solutions teams to support presales activities including solution design, scoping, effort estimation, proposals, RFQs and tenders.
• Ensure successful project delivery through effective stakeholder management, quality assurance, budget oversight and delivery governance.
• Mentor and coach consultants across the Application Security practice and broader CyberCX teams to support capability development and technical growth.
• Contribute to the development of methodologies, frameworks, tooling and repeatable service offerings.
• Participate in research, innovation and continuous improvement initiatives that strengthen CyberCX's Application Security capabilities.

You will bring experience in one or more of the following areas:

• Application Security
• Product Security
• Penetration Testing
• DevSecOps
• Software Development

• Conducting threat modelling exercises and security architecture reviews.
• Building, implementing and supporting automated security testing capabilities.
• Designing and implementing DevSecOps processes and CI/CD security controls.
• Conducting secure code reviews across a variety of languages and frameworks.
• Performing Secure SDLC and Secure DevOps maturity assessments using frameworks such as OWASP SAMM, BSIMM, DevSecOps maturity models and NIST SSDF.
• Working with containerised environments and Infrastructure as Code (IaC).
• Supporting cloud-native application development and automated deployment environments.

• 3+ years experience within Application Security, Product Security, DevSecOps and/or software development.
• Tertiary qualifications in Cyber Security, Information Technology, Software Development or a related field, or equivalent industry experience.
• Experience in cloud security and automated application deployment processes.
• Strong stakeholder engagement and communication skills.
• Ability to build trusted relationships with technical teams, customers and senior leaders.
• Experience leading complex customer engagements and delivering high-quality consulting outcomes.
• Strong analytical and problem-solving capabilities.
• A proactive and resilient approach with the ability to respond effectively to changing priorities.
• Commitment to delivering high-quality outcomes and exceptional customer experiences.

You are:

• Professional, ethical and trusted by those around you.
• Customer-focused and driven to deliver exceptional outcomes.
• A natural mentor who enjoys helping others learn and succeed.
• Curious, innovative and committed to continuous improvement.
• Collaborative and inclusive, with an enterprise-wide mindset.
• Emotionally intelligent, with strong communication and interpersonal skills.

CyberCX is Australia's leading independent cyber security services organisation.

With a team of highly skilled cyber security professionals across Australia and New Zealand, CyberCX helps organisations confidently manage cyber risk and respond to an increasingly complex threat landscape.

Our expertise spans:

Strategy & Consulting | Governance, Risk & Compliance | Security Testing & Assurance | Identity & Access Management | Network & Infrastructure Solutions | Managed Security Services | Cloud Security & Solutions | Digital Forensics & Incident Response | Cyber Capability, Education & Training

At CyberCX, you'll work alongside some of the industry's most experienced cyber security professionals, helping organisations solve complex security challenges and build cyber resilience.