Application Security Engineer

At Endeavour, we’re totally into what we do. With a portfolio that includes Dan Murphy’s, BWS, ALH Hotels, Pinnacle Drinks and more, we love to bring people together. Together we share our passion for our products and industry; it’s what inspires us to dream big, and continue to create new experiences for our customers and teams across Australia. If you thrive on positive energy, we want to meet you!

Application Security Engineer

Love what you do and leave your mark

Hybrid ways of working - Sydney or Melbourne location

Explore cutting-edge tech - from Google Gemini to Databricks - backed by supportive AppSec leadership and the autonomy to innovate

We are transforming our technology landscape as an independent business, and we're seeking an Application Security Engineer to play a critical role in uplifting our security posture. Reporting directly to the Senior Security Engineer, you will act as a key driver of application security initiatives by engaging closely with digital software engineering teams, product managers, and cross-functional squads. In this role, you will bridge the gap between complex security concepts and practical engineering, championing a security-first culture while shaping our long-term security strategy.

Sounds good? Read on.

Here is a taster of what you can expect in this role:

Driving Security Culture: Champion a security-first culture across the organisation through clear collaboration and technical leadership.

Enhancing the SDLC: Enhance our Software Development Lifecycle (SDLC) by leading security consultations, high-level threat assessments, code reviews, and providing strategic remediation advice.

Building Security Automation: Build and scale automated tools to identify and resolve security issues continuously across the SDLC.

Evaluating New Technologies: Trial new technologies pertaining to application security and assess their applicability across our evolving technology stack.

Vulnerability Management: Drive the triage and remediation of identified vulnerabilities, building proactive patterns and tools to prevent recurring risks.