Hybrid Application Security Engineer

at LEAP Wealth

• Job title: Application Security Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Python
• Location requirements: Hybrid, Sydney, Australia

About the role

• Application Security Engineer securing applications to protect clients’ data at LEAP. Conducting penetration testing and collaborating with security teams and stakeholders.

Responsibilities

• Conduct regular Penetration Testing across Web App, APIs, Internal and External Infrastructure.
• Red Teaming, Threat modelling and Code reviews.
• Create detailed vulnerability reports and share with key stakeholders.
• Automate daily tasks, tests and other regular admin tasks with automation scripts i.e., Python, Bash, Powershell etc.
• Communicate findings and recommendations clearly and effectively.
• Track vulnerability remediation.
• Coordinate third-party penetration tests and support compliance and audit requirements.

Requirements

• Bachelor’s degree in IT or a related field.
• Pentesting certifications will be highly regarded (OSCP, OSCP+, CRTO, CRTP, GPEN etc).
• Broad testing background across Web App, APIs, Internal and External Infrastructure.
• Experience producing structured penetration test reports that demonstrate the attack path with supporting evidence, business impact and detailed remediation advice.
• It would be a bonus if you’ve worked with tech, SaaS or Startup companies.
• Ability to approach complex problems with creativity and critical thinking.
• Excellent time management skills with the ability to prioritize tasks and manage multiple competing priorities.

Benefits

• Flexible and hybrid working.
• Enjoy an additional paid wellbeing day every year.
• Free gym membership.
• Corporate dental plan.
• Weekly massages in the office.
• Access to LEAP Home - a program unique to LEAP to support you in buying your primary residence.