Application Security Consultant

About the role

CyberCX is seeking an Application Security Consultant to help organisations build secure applications and strengthen their Secure SDLC practices. You will work on meaningful AppSec challenges, deliver high‑impact consulting, and influence secure development at scale across New Zealand.

Key responsibilities

• Deliver Application Security services such as threat modelling, Secure SDLC reviews and secure development training.
• Conduct mature Security Design Reviews and Maturity Assessments to identify risks early and define roadmaps.
• Build trusted, long‑term customer relationships and uncover growth opportunities.
• Act as a technical leader and subject‑matter expert both internally and externally.
• Produce clear, high‑quality reports and present findings, recommendations and roadmaps to customers.
• Support successful project delivery by meeting quality, timing and budget expectations.
• Contribute to innovation by improving methodologies, developing tools and supporting R&D.

Required profile

• 1+ years of experience in application/product security, penetration testing, DevOps or software development.
• Strong knowledge of Secure SDLC, Secure DevOps, containerisation and Infrastructure as Code.
• Familiarity with industry standards such as OWASP SAMM and NIST SSDF.
• Excellent communication, stakeholder engagement and analytical problem‑solving skills.
• Full New Zealand working rights are mandatory.

Required skills

• Threat modelling
• Secure code review
• Automated security testing tools
• DevSecOps processes
• CI/CD pipeline management
• Secure SDLC
• Secure DevOps
• Containerisation
• Infrastructure as Code (IaC)
• OWASP SAMM
• NIST SSDF

What we offer

• Opportunity to work with a leading cyber security firm across Australia, New Zealand, the UK and the US.
• Exposure to emerging security challenges in secure AI and supply‑chain resilience.
• Supportive leadership and a collaborative team environment.