At a Glance
- Tasks: Build a brand new application security function and lead a small team.
- Company: Join a large, diverse organisation with a flexible culture.
- Benefits: Super flexible working, leadership opportunities, and a chance to shape your role.
- Other info: Exciting opportunity to create something new in a meaningful environment.
- Why this job: Make a real impact in a greenfield environment and influence security practices.
- Qualifications: Solid application security background and strong communication skills.
The predicted salary is between 121500 - 148500 $ per year.
Ever wanted to build an application security function from scratch, your way? This is a rare chance to establish a brand new AppSec team inside a large, diverse organisation. It’s a complex and highly regulated environment, but the culture is genuinely flexible, and the security function is backing in-house capability over off-the-shelf fixes.
The opportunity
Reporting to the Head of Security Engineering & Platforms as the 2ic, you’ll own the application security advisory capability. This is not a platforms or engineering-ops role: your focus is advisory, architecture and setting the direction for how applications are designed, built and secured across the business. This is a great opportunity for an application security engineer or lead to step up into a management role. You’ll lead a small team including a Cyber Security Architect and Application Security Engineers.
What you’ll be doing
- Building the AppSec function from the ground up, including standards, patterns, control requirements and assurance processes
- Owning security architecture input and secure-by-design practices across application delivery
- Embedding DevSecOps practices into delivery pipelines where they make sense
- Leading application risk assessments, design reviews and threat modelling, plus oversight of security testing and remediation
- Working closely with delivery teams, architects, risk, technology and strategic partners to lift application security posture
- Reporting on application risk, control gaps, remediation progress and capability maturity
What we’re looking for
- Solid application security background, with hands-on experience in secure design reviews, threat modelling, security testing and vulnerability remediation
- A builder’s mindset: comfortable with ambiguity and excited by creating something new rather than maintaining something established
- Curiosity and willingness to learn. Attitude and capability matter more than a perfect checklist
- Strong communication skills and the ability to influence both technical and business stakeholders
On tooling
The team is tool-agnostic. Modern AppSec platforms are being explored, but what you bring to the table matters far more than which tools you’ve used. You’ll have real input into the approach.
Why this role?
- Genuinely greenfield work, with your fingerprints on the function from day one
- A step into leadership with the scope and backing to shape a capability
- Varied, meaningful environment across critical infrastructure and essential services
- Super flexible working: 2-3 days in the office, with Tuesday as the team anchor day
Application Security Manager in Melbourne employer: Decipher Bureau
Join a leading global financial services organisation that champions innovation and security in the rapidly evolving tech landscape. With a strong focus on employee growth, you'll have the opportunity to work alongside talented professionals in a collaborative environment that values hands-on engineering skills and creative problem-solving. Enjoy competitive benefits and a culture that encourages continuous learning and development, all while making a meaningful impact in securing next-gen technology platforms.
