Application Security Lead

🔥 13 hours ago

🇦🇺 Australia – Remote

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

MedHealth

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

🏥 Healthcare

⚕️ Healthcare Insurance

💼 Consulting

Healthcare • Healthcare Insurance • Consulting

MedHealth is a purpose-built collection of industry-leading health, medical, and employment brands. The company focuses on improving health and employment outcomes for populations while maintaining a commitment to the individual. With a presence in countries such as Australia, the United States, Canada, and the United Kingdom, MedHealth is part of the ExamWorks global network, delivering over 2 million medical opinion and case management services annually.

📋 Description

• Own and operate application security across the SDLC • Identify and assess application security risks and partner with Engineering teams on remediation • Perform secure code reviews, primarily in .NET, and support secure development practices • Lead threat modelling and security assessments across applications and automation workflows • Adapt security practices to different team maturity levels while balancing uplift, standardisation and delivery needs • Own and optimise AppSec tooling (SAST, DAST, SCA) across CI/CD pipelines • Ensure effective security testing without impacting delivery velocity • Own vulnerability visibility, prioritisation and reporting • Define and apply secure design and development standards • Establish Security Champions across development teams • Mentor developers and uplift secure coding capability across teams

🎯 Requirements

• 5+ years’ experience in software engineering, including 2+ years in an application security role • Strong experience with DevSecOps and CI/CD environments • Hands-on experience with AppSec tools (SAST, DAST, SCA) • Strong experience working in Azure environments and Azure DevOps pipelines • Comfortable reviewing code (C#, .NET, web applications) • Strong understanding of OWASP Top 10 and secure design principles • Experience working across multiple teams or platforms with varying maturity levels • Ability to adapt approach based on risk, complexity and delivery context • Self-driven, accountable and strong at stakeholder engagement

🏖️ Benefits

• Ability to own and run a mature Application Security capability • Work across a diverse application landscape and multiple engineering teams • A culture that values continuous improvement, learning, and knowledge sharing • Great balance of working from home and office collaboration • Equal Opportunity Employer • Recruitment process adjustments to support accessibility needs