company_site
Security Engineer
Smart Communications
Remote, GBR
Full-time
Senior · 5+ years experience
Remote
Discovered 2 weeks ago
DevSecOpsOWASP Top 10AWSDASTSCAIaC
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
DevSecOpsOWASP Top 10AWS
Key Skills for This Role
DevSecOpsOWASP Top 10AWSDASTSCAIaC
Full Job Posting
- Develop a strong understanding of Smart Communications’ products/ application landscape, SaaS, cloud, APIs and supporting infrastructure to identify security risks and strengthen the organisation's overall security posture.
- Collaborate with Engineering, Architecture, Product, Cloud, Infrastructure, and Platform teams to embed secure-by-design and DevSecOps practices. Identify application security risks and improve controls across authentication, authorisation, secrets management, encryption, and cloud security through automation, CI/CD enhancements, developer enablement, and security guidance.
- Support threat modelling, secure design reviews, application security assessments, and testing across web applications, APIs, cloud services, and supporting components.
- Operate and improve application security tooling, including DAST, SCA, IaC and container scanning, vulnerability triage, false-positive analysis, and exception management.
- Drive vulnerability management and continuous improvement by prioritising remediation, guiding development teams, strengthening key controls, and tracking emerging threats
- 5+ years’ hands-on experience in Application Security, Product Security, DevSecOps, or a similar security engineering role.
- Strong application security expertise, including OWASP Top 10, API security, authentication and authorisation, session management, cryptography, secure coding, and cloud security across AWS.
- Experience embedding security into the SDLC through secure design reviews, threat modelling, security testing, DevSecOps practices, CI/CD pipeline security, automation, and engineering collaboration.
- Proven ability to assess and secure web applications, APIs, microservices, cloud applications, third-party integrations, architecture, configurations, dependencies, IAM, secrets management, encryption, and data protection controls.
- Skilled in application security tooling, vulnerability triage, risk assessment, remediation support and stakeholder communication.
- Preferred: degree in Computer Science, Cyber Security, Information Security, Software Engineering, or a related field; relevant AppSec/cloud certifications such as OSCP, OSWE, GWAPT, CSSLP, BSCP, AWS Security Specialty, or Azure Security Engineer Associate.
- Preferred: experience with Python, Java, JavaScript; SaaS environments; compliance frameworks including PCI-DSS, ISO/IEC 27001, SOC 2, HIPAA, or IRAP; and threat modelling methodologies such as STRIDE or PASTA.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Smart Communications
Account Director, Enterprise Financial Services
Sydney, AUS
SeniorFull-time
Discovered 3 days agoView →
Account Director, Enterprise Financial Services
Sydney, AUS
Discovered 3 days agoFull-time
Legal Counsel
, USA
Discovered 1 weeks agoFull-time
Associate Consultant
Sydney, AUS
Discovered 1 weeks agoFull-time
Senior Product Designer
Sydney, AUS
Discovered 1 weeks agoFull-time
Product Marketing Manager
, GBR
Discovered 1 weeks agoFull-time
Integration Developer
, GBR
Discovered 1 weeks agoFull-time
Assistant Management Accountant
London, GBR
Discovered 2 weeks agoFull-time
Platform Engineer
, AUS
Discovered 2 weeks agoFull-time