Home

You might think you know us, but we’re transforming.  

In this rapidly evolving commercial landscape, we’re changing too. And we’re only getting started.

Australia Post’s strategy involves helping our people, customers and communities build a better future delivering to everyone, everywhere, every day. We have strong opportunities ahead to better connect people as we pivot to a digital world.

Your role?

As an Application Security Engineer, be a part of a team that provides expertise to inform and validate the secure design and development of web, mobile, infrastructure and cloud-based solutions. Support application security tooling and, guide development teams to ensure security is a key component of the entire software development lifecycle for Australia Post’s products and services. The role interfaces and collaborates with multiple teams and stakeholders to provide application security expertise across the entire development lifecycle, including informing secure solution design, validating the security of applications, infrastructure and services, driving adoption and use of secure SDLC and engaging with business stakeholders, enabling the teams to quickly and securely deliver new and innovative world class solutions.

What we are looking for?

• Previous experience performing in a similar capacity for at least 3-5 years
• Strong experience with web application security, including penetration testing and secure code reviews
• Experience with application architecture and secure solution design
• Experience with application security tooling, including SCA, SAST, IAST and DAS and building, supporting and operating secure CI/CD piplines
• Experience delivering application security advice within a commercial environment with significant operational, performance, security and availability requirements
• Understanding of configuration management tools such as Puppet, Chef or Ansible. Experience in unit and systems tests are also desirable
• Experience administering and troubleshooting Linux such as Redhat, CentOS or similar
• Knowledge of distributed version control such as git inclusive of branching, merging and releasing strategies
• Experience with continuous integration and relevant tools such as Bamboo, Jenkins or similar
• Working experience in IaaS, in particular GCP and AWS and web application security practices
• Experience with cloud application, architectural and infrastructure patterns is desirable
• Understanding of writing and maintaining code in Python, Ruby or Bash and interacting with APIs
• Knowledge with monitoring and centralised logging tools and technologies an advantage.

You will also have exceptional communication and stakeholder management skills along with strong understanding of DevSecOps, Continuous Delivery, Continuous Integration, “Infrastructure as code”, and related practices and ideas.

We believe investing in our people is good business. 

That’s why we have team dedicated to career coaching and support for our employees. And we know that your life outside of work matters. So while we work hard, we also have a culture that promotes a genuine work/life balance. ​ 

Together, our differences make us stronger. ​ 

With a reach across Australia and beyond, we’re building a workforce that’s as diverse as the communities we serve. Learn more about how we're supporting inclusion at Australia Post, here. If you require adjustments at any stage of the recruitment process, please reach out to the Talent Acquisition Diversity Team at inclusivecareers@auspost.com.au. ​ 

Australia Post welcomes applications from Aboriginal and/or Torres Strait Islanders. Check out this short video to find out how we acknowledge and pay our respects to the Traditional Custodians of the land we operate on.   ​ 

Ready to join the transformation of Australia Post? Click apply, to help shape our tomorrow.  ​

#LI