Application Security Engineer

About LEAP

LEAP is the leading provider of Legal Practice Management Solutions in the world and is part of ATI - one of the largest international LegalTech companies. For more than 30 years, our curiosity and commitment to continual improvement has kept us re imagining productivity tools for lawyers and their staff to support our guiding purpose, to 'Help lawyers who help people'. The market leading software we develop and support is used by more than 71,000 lawyers and their staff in small and medium sized law firms.

Working alongside our international team of passionate high achievers, you'll join a fast growing technology business where things seldom stay the same for long. With more than 1,000 smart, caring and ambitious LEAPsters working together across Australia, Canada, the United States, the United Kingdom, the Republic of Ireland, Poland and New Zealand, you'll find yourself in good company.

What You'll Do

You'll be joining our Platform Security Engineering team - a group of smart, talented engineers who make sure every application LEAP builds is secure.

Day to day, you'll work alongside LEAP engineering teams to secure our applications, hunt down vulnerabilities, and help strengthen our software development lifecycle.

Reporting to our Application Security Team Lead, you'll turn technical findings into clear, actionable guidance our teams can act on.

To make this happen, you will:

• Conduct regular internal penetration testing across web applications, APIs, internal and external infrastructure
• Red Teaming, threat modelling and code reviews
• Create detailed vulnerability reports and share them with key stakeholders
• Communicate findings and recommendations clearly and effectively
• Track vulnerability remediation
• Conduct threat modelling sessions with internal development teams
• Coordinate third party penetration tests and support compliance and audit requirements

What You'll Bring

• Bachelor's degree in IT or a related field
• Pentesting certifications will be highly regarded (OSCP, OSCP+, CRTO, CRTP, GPEN, etc.)
• Broad testing background across web applications, APIs, internal and external infrastructure
• Experience producing structured penetration test reports that demonstrate the attack path with supporting evidence, business impact and detailed remediation advice
• It would be a bonus if you've worked with tech, SaaS or startup companies
• Ability to approach complex problems with creativity and critical thinking
• Excellent time management skills with the ability to prioritise tasks and manage multiple competing priorities

You Are The Type Of Person Who

LEAP is an inclusive, people first company committed to breaking down institutional barriers that keep people from reaching their potential. If you meet some, but not all, the requirements above, we encourage you to still submit your application.

Why join LEAP?

• Your work matters - helping lawyers help people sits at the heart of everything we do; we solve real world problems that improve and support local, everyday law firms so they can do their best work for the people in the communities they serve
• Make an impact - you won't be another 'cog in the wheel'; we give full trust and autonomy for you to be heard, to work on big & complex projects, and to make a real difference
• Work with a group of authentic, passionate people who love what they do
• Flexible and hybrid working - we want this person in Sydney but are open to flexible arrangements that support you
• Grow your career with us - our founder Christian Beck has been building legal tech businesses for over 30 years; there are opportunities to expand your career based on your interests and the market
• Have fun with us - celebrations, socials, sports teams, access to sailing and yacht events
• We value your well being - an additional paid wellbeing day every year, free gym membership, corporate dental plan and weekly massages in the office
• Work in a new, beautiful office space - catered lunch and breakfast every week, fully stocked kitchen and on site barista
• Access to LEAP Home - a program unique to LEAP to support you in buying your primary residence