Application Security Engineer

About this role

About Us

Let’s create a more sociable future together

At Endeavour, we’re totally into what we do. With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, we love to bring people together. Together we share our passion for our products and industry; it’s what inspires us to dream big, and continue to create new experiences for our customers and teams across Australia. If you thrive on positive energy, we want to meet you!

Application Security Engineer

• Love what you do and leave your mark
• Hybrid ways of working - Sydney or Melbourne location
• Explore cutting-edge tech - from Google Gemini to Databricks - backed by supportive AppSec leadership and the autonomy to innovate

We are transforming our technology landscape as an independent business, and we're seeking an*Application Security Engineer* to play a critical role in uplifting our security posture. Reporting directly to the Senior Security Engineer, you will act as a key driver of application security initiatives by engaging closely with digital software engineering teams, product managers, and cross-functional squads. In this role, you will bridge the gap between complex security concepts and practical engineering, championing a security-first culture while shaping our long-term security strategy.

Sounds good? Read on.

Here is a taster of what you can expect in this role

• Driving Security Culture: Champion a security-first culture across the organisation through clear collaboration and technical leadership.
• Enhancing the SDLC: Enhance our Software Development Lifecycle (SDLC) by leading security consultations, high-level threat assessments, code reviews, and providing strategic remediation advice.
• Building Security Automation: Build and scale automated tools to identify and resolve security issues continuously across the SDLC.
• Evaluating New Technologies: Trial new technologies pertaining to application security and assess their applicability across our evolving technology stack.
• Vulnerability Management: Drive the triage and remediation of identified vulnerabilities, building proactive patterns and tools to prevent recurring risks.
• Delivering Security Training: Deliver targeted application security training and awareness tailored specifically to the needs of our engineering teams.
• Stakeholder Engagement: Act as a pivotal bridge between security, technology, and product teams, translating complex technical risk concepts into clear, actionable guidance.
• Strategic Collaboration: Collaborate closely with Security Architecture, Cyber Risk, and Assurance teams to contribute to our overarching cyber strategy.

What do we need from you

Now Let’s Talk About You

• Application Security Expertise: Strong understanding of Application Security principles embedded within agile development environments.
• Cloud Infrastructure Knowledge: Technical familiarity with DevSecOps, Azure infrastructure, Google Cloud, and Vertex AI.
• Tooling and Frameworks: Solid grasp of Web and Mobile application security, OWASP frameworks, Container Security, Kubernetes, and automated testing tools (SAST, DAST, SCA).
• Programming and Scripting: In-depth hands-on experience with languages such as .NET (C#), JavaScript, Python, or related scripting environments.
• Threat Assessment Expertise: Demonstrated expertise in Threat Modelling and Security Architecture.
• Strong Communication Skills: Outstanding communication skills with a proven track record of collaborating effectively with both technical and non-technical stakeholders.
• Pragmatic Mindset: A pragmatic, curious, and adaptable mindset with the ability to navigate complex, fast-paced environments under pressure.
• Industry Certifications: Professional ICT certifications such as SANS GWAPT, SANS GPEN, OSCP, OSWE, or CISSP are highly regarded.

The benefits are good too!

• An exclusive discount card for our ALH Hotels pubs & accommodation, BWS, Dan Murphy’s and other Endeavour Group brands. Through our partnership with Woolworths, you'll also enjoy discounts at Woolies supermarkets and BIG W
• As a valued member of the team, your health and wellbeing is our top priority. You will have access to a range of free services to help you live well and support your physical, mental and financial wellbeing
• Endeavour Group is full of opportunities - use our dedicated learning and development options to grow an idea, yourself, and your career. This is just the start, so dream big
• Find out more about our range of benefits and discounts here

At Endeavour, we value being a workplace where everyone’s welcome - if you meet a number of the requirements (and not all), we encourage you to apply.

What's in it for you?

We are together creators

With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, Endeavour Group is big on sociability. Together we create the moments that bring millions of people together. And together we have more fun, create more opportunities, and score a lot more goals. We’re serious about creating a safe, inclusive and fun place to rock up to where equal opportunity is key, and flexibility is part of how we roll.

We’re all about creating a more sociable future - for our customers and each other. If this job excites you - and you’re close-enough on the requirements, reach out, we’d love to hear from you.

You can learn more about working with us on LinkedIn or at endeavourgroupcareers.com.au.

Our Talent Team and Hiring Leaders kindly request no unsolicited resumes or approaches from Recruitment Agencies. Endeavour Group is not responsible for any fees related to unsolicited resumes.

#WeAreTogetherCreators #ComeAsYouAre #DreamBig #FeelTheEnergy #LeaveYourMark #EndeavourGroup

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.