Application Security Consultant in Melbourne

Location: Melbourne CBD

Contract: 3 months, with potential for extension

Bring your application security expertise to a role where your recommendations will shape the security of an enterprise workflow solution. We’re seeking an experienced Application Security Consultant to assess an internal Workflow Solution, identify security risks and guide practical improvements aligned with DTP cybersecurity requirements. Working directly with DTP Cyber Security teams, you’ll review Microsoft cloud configurations, assess application security controls and develop a prioritised remediation roadmap. This is an opportunity to combine technical investigation, risk assessment and stakeholder engagement to deliver clear, actionable security outcomes.

What you’ll do:

• Review security configurations across Microsoft Power Platform and SharePoint Online, identifying vulnerabilities, control weaknesses and exposure risks.
• Assess compliance with DTP Application Security Standards, documenting control gaps, non-compliance and remediation requirements.
• Conduct a comprehensive application security risk assessment, evaluating risk likelihood, impact and criticality.
• Develop prioritised mitigation strategies and a practical remediation roadmap.
• Engage with technical and business stakeholders to communicate findings and recommended actions.

Your key deliverables will include a Cloud Security Configuration Review Report, Security Assurance and Compliance Assessment Report, Application Security Risk Assessment Report, and Risk Mitigation and Remediation Roadmap.

What you’ll bring:

• At least five years’ experience conducting application security assessments.
• Experience assessing applications built on Power Apps and Power Automate.
• Experience with workflow or business process management platforms.
• Strong stakeholder engagement and communication skills, including the ability to explain security risks and remediation priorities clearly.

You’ll also bring experience and capability across:

• Enterprise testing and delivery.
• Enterprise application testing within Agile and hybrid delivery environments.
• Functional, integration, regression and risk-based testing.
• User Acceptance Testing coordination, defect lifecycle management, release validation and deployment support.

Tools and technologies:

• Azure DevOps, Jira or equivalent test management platforms.
• API and integration testing, SQL and data validation, and test automation frameworks.
• Enterprise web applications and cloud-hosted environments.
• Identity and access management solutions and service-oriented architectures.
• Data migration and transformation testing.

Security and compliance:

• Victorian Government ICT standards and cybersecurity testing principles.
• Privacy and data protection requirements.
• Secure development and deployment practices.
• Risk and compliance frameworks.

Why apply?

Put your expertise to work across Microsoft cloud technologies, collaborate directly with cybersecurity specialists and turn assessment findings into a clear plan for stronger application security.