Senior Application Security Engineer

XPT Software Australia Pty Ltd Contract

Senior Application Security Engineer

Sydney, Australia Posted on 09/21/2026

• XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
  
• XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
  
• We have 120+technocrats in Australia working at our clientlocations.
  
• XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
  
• We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
  

Job Description

Job description: Senior Application Security Engineer - Secure Code ScanningImplementation

• Lead the implementation and onboarding of Secure Code Scanningplatforms such as Snyk, Fortify, Checkmarx, or Veracode across thesoftware development lifecycle.
  
• Design and implement integrations with GitHub, GitLab and CI/CDpipelines to enable automated security scanning and policy enforcement.
  
• Collaborate with development, DevOps, and security teams to definescanning strategies, remediation workflows, quality gates, and securecoding controls.
  
• Proactively identify implementation challenges, integration dependencies,developer adoption issues, and performance impacts, and provide practicalsolutions to mitigate risks.
  
• Establish vulnerability management processes, including triage,risk prioritization, exception handling, SLA definition, and remediationtracking.
  
• Develop technical standards, deployment procedures, operationalrunbooks, and governance processes to support long-term platform adoption.
  
• Provide hands-on support during implementation, testing, rollout,and post-go-live stabilization activities while mentoring developmentteams on secure coding practices.
  
• Demonstrated experience implementing similar Application Securityand Secure Coding solutions in large enterprise environments, with strongknowledge of SAST, vulnerability management, SDLC, and DevSecOpspractices.