At NCS Australia, we believe in doing technology services better. Our commitment to quality, focus on people, and willingness to challenge traditional thinking set us apart. Our team brings this belief to life by partnering with our clients and communities to make tomorrow together.
We are committed to creating an environment that prioritises innovation, collaboration, and purposeful work. Our diverse team is empowered to make a meaningful impact with curiosity, creativity and resilience to shape better outcomes. Join us and accept the challenge of creating a better tomorrow.
Job DescriptionWe are seeking a specialist Application Security Developer to join our enterprise cybersecurity and engineering organization in Sydney.
This role is specifically tailored for a practitioner who brings a strong software engineering background paired with deep application security expertise. You will spearhead our initiative to uplift secure code scanning capabilities and implement AI-assisted remediation workflows across our software development lifecycle (SDLC), ensuring that applications, microservices, and modern integrations are built securely by design.
Key Responsibilities
Secure Code Scanning Uplift: Design, configure, and optimize enterprise static (SAST), dynamic (DAST), and dependency (SCA) code scanning capabilities to ensure robust coverage across all development squads.
AI-Assisted Remediation: Pioneer the implementation of AI-driven tools and LLM-assisted workflows to automate vulnerability triage, accelerate code review, and provide developers with automated remediation guidance.
Secure Coding & Remediation Guidance: Review code, diagnose complex vulnerabilities (OWASP Top 10, CWE, LLM security risks), and partner directly with engineering squads to resolve security findings in modern languages (e.g., Python, Java, Go, Node.js/TypeScript).
API Security & Identity Guardrails: Build secure application components and authentication/authorization controls, integrating seamlessly with enterprise identity platforms (Ping Identity, Entra ID) using OAuth 2.0, OIDC, and JWT validation.
Pipeline Integration & Shift-Left: Embed security guardrails and automated scanning controls directly into modern CI/CD pipelines (GitHub Actions, GitLab CI, Azure DevOps) without hindering delivery velocity.
Threat Modeling & Enablement: Conduct threat modeling assessments during feature design phases and create reusable security standards to foster a strong developer-first security culture.
Essential Experience:
Dedicated Application Security & Developer Background: Proven track record combining hands-on software development experience with specialized application security engineering.
Secure Code Scanning & Pipeline Uplift: Practical, hands-on experience setting up, tuning, and scaling enterprise code scanning tools (SAST/SCA/DAST) within automated CI/CD pipelines.
AI-Assisted Security Tools: Demonstrated familiarity or practical experience leveraging AI/LLM tools for automated code review, vulnerability triage, or security remediation workflows.
Application & API Security Mastery: Deep technical understanding of web/API security, secure authentication/authorization protocols (OAuth 2.0, OIDC), and common software vulnerabilities.
Location: Sydney-based (hybrid) with full Australian working rights.
Desirable:
Exposure to secure AI/LLM integration patterns, prompt security guardrails, or model risk controls.
Experience interfacing with enterprise identity platforms (e.g., Ping Identity) or vulnerability management platforms (Tenable).
Relevant industry certifications (CSSLP, GWAPT, GWEB, OSCP, or CASE).
Why NCS?
This is a place for people who like to get stuck in, bring ideas to life and make things happen. You'll work alongside experienced people who care about what they do, contribute to meaningful work and have the support to keep learning and grow your career. Whether you want to deepen your expertise, explore something new or take your career in a different direction, there's room to make it your own. We value Adventure, Excellence, Integrity, Ownership and Unity - bringing curiosity, collaboration and accountability to the way we work with our clients and each other.
Ready to make extraordinary happen?
We'd love to hear from you.
We celebrate diversity and inclusion
We value different perspectives, experiences and strengths our people bring. We're committed to an inclusive workplace where everyone has the opportunity to contribute, grow and succeed, and to providing equal employment opportunities and reasonable adjustments throughout the recruitment process.
Important information
Applicants will need valid Australian work rights and may be required to undergo relevant background, probity and police checks.
Agencies: NCS accepts candidate submissions only from agencies on our preferred supplier panel through the NCS Agency Portal.
Skills Required
- Hands-on software development experience combined with specialized application security engineering experience
- Experience setting up, tuning, and scaling SAST, SCA, and DAST tools within CI/CD pipelines
- Familiarity or practical experience using AI or LLM tools for code review, vulnerability triage, or remediation
- Deep understanding of web and API security, OAuth 2.0, OIDC, authentication, authorization, and common software vulnerabilities
- Sydney-based availability for hybrid work
- Full Australian working rights
- Experience with secure AI or LLM integration, prompt security guardrails, or model risk controls
- Experience with Ping Identity or vulnerability management platforms such as Tenable
- CSSLP, GWAPT, GWEB, OSCP, or CASE certification
What We Do
NCS in Australia is reinventing technology services from the inside out. We provide advisory, design, build and managed services to our clients, with unrivalled service, attention and understanding every step of the way. We understand day 1001 is just an important as day 1, and we collaborate with clients, striving to provide adaptive approaches, outcomes and thinking by keeping our eye on tomorrow and the days after tomorrow. Our diverse workforce of around 1,300 people has delivered a wealth of large-scale, mission-critical, and multi-platform outcomes for governments and businesses nationally. We are the Australian arm of the pan-APAC technology leader NCS Group, a subsidiary of Singtel Group. Combining the experience and expertise of its 13,000-strong team across 57 specialisations, NCS provides differentiated and end-to-end technology services to clients with its capabilities in digital, data, cloud and platforms, as well as core offerings in application, infrastructure, engineering and cybersecurity. NCS also believes in building a strong partner ecosystem with leading technology players, research institutions and start-ups to support open innovation and co-creation. For more information about NCS Australia, visit ncs.co/en-au or contact our team today. To learn more about NCS Group, visit ncs.co.
