Security Engineer

About this role

About Us

At ANZ, we're shaping a world where people and communities thrive, driven by a common goal: to improve the financial wellbeing and sustainability of our millions of customers.

As an Application Security Engineer within our Application Security Engineering Squad, you'll play an important role in helping keep ANZ safe by ensuring applications are developed securely. Supporting a range of application security services, you'll work closely with engineering teams to identify security risks, improve security practices, and enable the adoption of DevSecOps across the enterprise.

You'll leverage modern security tools and techniques to support secure code reviews, software composition analysis, secure development training, and the ongoing enhancement of application security capabilities.

Banking is changing and we’re changing with it, giving our people great opportunities to try new things, learn and grow. Whatever your role at ANZ, you’ll be building your future, while helping to build ours.

Role Type: Permanent

Role Location: Melbourne or Brisbane

Work Hours: Full-Time

What will your day look like?

As an Application Security Engineer, you will

• Support application security services including secure code reviews, software composition analysis (SCA), and secure development training.
• Assess security tool outputs and review source code and configurations to identify vulnerabilities and security risks.
• Provide practical guidance and recommendations to engineering teams on remediation approaches and secure coding practices.
• Assist with the integration, management, automation, and optimisation of application security tooling within development pipelines.
• Collaborate with engineers and stakeholders to embed security practices into software development lifecycles.
• Contribute to the adoption and maturity of DevSecOps practices across ANZ.
• Partner with teams to balance security outcomes with business and customer needs.
• Continuously develop your technical expertise and remain informed about emerging security threats, technologies, and best practices.

What will you bring?

To grow and be successful in this role, you will ideally bring:

Essential Skills & Experience

• Foundational knowledge of application security concepts and secure software development practices.
• Exposure to security testing technologies such as Static Application Security Testing (SAST) and Software Composition Analysis (SCA), gained through professional experience, study, certifications, or personal projects.
• Understanding of common application security vulnerabilities and secure coding principles, including OWASP Top 10.
• Ability to analyse security findings and communicate risks and remediation recommendations clearly.
• Experience with, or knowledge of, at least one programming or scripting language such as Java, Python, JavaScript, or C#.
• Strong analytical and problem-solving capability.
• Excellent written and verbal communication skills.
• Demonstrated curiosity and willingness to learn and develop expertise in application security and DevSecOps.

Desirable Skills & Experience

• Exposure to DevSecOps practices, CI/CD pipelines, Infrastructure as Code (IaC), and security automation.
• Awareness of cloud platforms such as Microsoft Azure, AWS, or Google Cloud Platform (GCP).
• Familiarity with Git or other source code management platforms.
• Experience working in Agile delivery environments.
• Relevant cybersecurity, cloud security, or secure development certifications or training.
• A demonstrated passion for cybersecurity through study, certifications, community involvement, capture-the-flag competitions, or personal projects.

You’re not expected to have 100% of these skills. At ANZ a growth mindset is at the heart of our culture, so if you have most of these things in your toolbox, we’d love to hear from you.

So why join us?

From the moment you join ANZ, you'll be doing meaningful work that will shape a world where people and communities thrive.

But it's not just our customers who'll feel your impact. You'll feel it too. Because at ANZ, you'll have the resources, opportunities, and support you need to take the next big step in your career.

We're a diverse bunch at ANZ in different roles, different locations, doing different things. That's why we have a range of flexible working arrangements, so our people can 'make work, work for them'. We also provide a range of benefits including access to health and wellbeing services and discounts on selected products and services from ANZ and more.

At ANZ, you'll be part of an organisation where the different backgrounds, perspectives and life experiences of our people are celebrated. That's because we're committed to building a workplace that reflects the diversity of the communities we serve. We welcome applications from everyone and encourage you to talk to us about any adjustments you may require to our recruitment process or the role itself. If you're a candidate with a disability or access requirement, and have an enquiry about the support provided, please let us know on your application or visit ANZ Accessibility and Inclusion Programs for alternate contact methods.

To find out more about working at ANZ, visit https://www.anz.com.au/careers. You can apply for this role by visiting ANZ Careers and searching for reference number 121792 .

Job Posting End Date

28/08/2026, 11.59pm, (Melbourne Australia)

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.