Senior Security Engineer
Commonwealth Bank of Australia (company site, opens in a new tab)8–12 yrsBengaluruOn-siteDirect career pageEst. 25–45 LPA
Posted on 18 Sept
Reach people at Commonwealth Bank of Australia
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Commonwealth Bank of Australia you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Own the design and operational effectiveness of application security controls within the Secure Build & Deploy team, focusing on DevSecOps automated security tooling in CI/CD pipelines.
- Collaborate with software engineering teams to embed security tooling, support secure coding practices, and manage false positives/negatives from application security tools.
- Report application security initiative results to stakeholders including leadership, product management, risk, and engineering teams.
Minimum Requirements
- 8-12 years of experience in Security Engineering with strong expertise in Secure Software Development.
- Bachelor’s or Master’s degree in Computer Science, Information Technology, Software Engineering, Cyber Security, or related discipline.
- Experience with CI/CD and DevSecOps practices is essential; experience with tools like Snyk or GitHub Advanced Security is desirable.
- Work Experience Required: 8-12 years in relevant domain; Notice Period: Not explicitly mentioned in the JD.
Ideal Candidate Profile
- Experienced in application security frameworks such as OWASP and NIST SSDF with an engineering mindset to develop and integrate secure coding resources.
- Proficient in consulting cross-functional technical and business stakeholders to balance security requirements with business needs, emphasizing risk management.
- Familiar with developing and embedding automated security tools into software delivery pipelines and mentoring security champions within agile engineering teams.