Senior Security Engineer

As a Senior Security Engineer within our Application Security team, you’ll engineer, integrate and operate application security capabilities across Westpac’s software development environments.

You’ll deliver scalable, automated security solutions embedded into development and DevOps platforms, helping engineering teams build and maintain secure software with greater speed and less friction. You’ll also provide practical security guidance and help strengthen application security practices across the Group. 

You will be responsible for - 

• Engineering, operating and maintaining application security platforms and tooling.
• Implementing automated code analysis, software composition analysis, secrets scanning and software supply-chain security capabilities.
• Integrating security controls into developer environments, GitHub repositories and CI/CD pipelines.
• Embedding automated security controls early in the software development lifecycle.
• Automating vulnerability identification, remediation and prevention at scale.
• Partnering with engineering and platform teams to deliver repeatable security outcomes.
• Providing practical application security guidance to developers and engineering teams.
• Supporting education and enablement initiatives that uplift secure development capability.

You’ll be an experienced security engineering professional with strong application security knowledge and the ability to develop automated, scalable security solutions.

Must-have technical skills

• Strong hands-on experience with Snyk.
• Strong working knowledge of GitHub and source-code security integrations.
• Familiarity with Wiz.
• Engineering and scripting experience using Python.
• Strong DevOps experience, including integrating security controls into CI/CD pipelines and developer workflows.
• Experience across application security, security automation and vulnerability management.
• Understanding of secure software development and shift-left security practices.

Preferred experience

• Experience working with AI or agentic development technologies.
• Security solution engineering and design experience.
• Experience owning or supporting security platforms and services.
• Strong technical problem-solving and communication skills.
• Ability to provide practical guidance and security education to engineering teams.