Application Security Manager

You're passionate about a career delivering solutions that impact millions.

Your innovative mindset is key to creating solutions to complex problems. Our systems drive our organisational success and underpin every journey our customers take. This is your opportunity to be part of an expert team who build and refine seamless technology experiences.

In this role, you'll:

Help secure SCATS, a globally recognised traffic management platform used around the world. You'll influence the design of secure software solutions and technology architectures and enable teams to build secure products by design. Working closely with architects, developers, product managers and business stakeholders, you'll help manage cyber risk while supporting innovation and delivery.

Work within the Finance, Technology & Commercial Division, under the Commercial & Energy Management Branch. You'll help define and drive the long-term product vision, strategy and roadmap for the Sydney Coordinated Adaptive Traffic System (SCATS), a globally recognised traffic management platform used to improve the movement of people and goods around the world.

• Embed security controls and secure-by-design principles throughout the software development lifecycle, enabling teams to build and deploy secure applications by default.
• Conduct security architecture reviews, threat modelling exercises and application risk assessments for new and existing products, services, cloud platforms and SaaS solutions.
• Define, maintain and improve secure development requirements, standards, guardrails and assurance activities that support the delivery of secure products and services.
• Analyse findings from security testing and automated security tools, triage vulnerabilities and work with product teams to develop practical remediation strategies.
• Collaborate with product owners, architects and engineering teams to integrate security into application design, development and release activities.
• Define, maintain and improve secure development requirements, standards, guardrails and assurance activities that support the delivery of secure products and services.
• Improve application security awareness and capability through technical guidance, coaching, knowledge-sharing sessions and the promotion of contemporary security practices.
• Support security governance, risk management and assurance activities, helping ensure products and services meet organisational security requirements and industry-recognised standards.
• Assess security implications of emerging technologies, including cloud-native platforms, SaaS solutions, artificial intelligence and modern software delivery practices.

The team also comes together in person for activities such as branch all-in days, training sessions, planning workshops and collaborative work.

For more information on this position and business unit, view the role description and information pack.

About you

• Four or more years’ experience in cyber security, with substantial experience in application security, product security or DevSecOps environments.
• Hands-on experience implementing and managing application security testing and assurance practices, including SAST, DAST, SCA and CI/CD integrated security tooling.
• Demonstrated experience across multiple application security disciplines, such as threat modelling, secure code practices, vulnerability analysis, security assurance and application focused incident response.
• Strong understanding of application security frameworks, standards and secure-by-design principles, together with practical experience securing applications and services deployed in AWS and SaaS environments.
• Experience reviewing solution architectures and technology designs, with the ability to identify security risks and recommend practical, risk-based controls.
• Demonstrated ability to influence technical and non-technical stakeholders and translate complex security concepts into practical guidance and business outcomes.
• Strong analytical, communication and problem-solving skills, with demonstrated success working collaboratively with software design and development teams in agile environments.

Who we are

Transport for NSW provides a safe, integrated, and efficient transport system. We connect people, communities and industry every day.

Join us

Our workforce is as diverse as the community we serve. If you’d like further information on our inclusion and diversity initiatives, visit Transport careers.

Flexible work options may be available. Learn more via Flexible work options and policy

Apply today

Applications close 11:59 PM Sunday 25 October 2026

For more information about this role, please contact SRIVATSA.LAKSHMINARAYANA@TRANSPORT.NSW.GOV.AU.

Aboriginal people and people living with disability are supported throughout the recruitment process and at work, and we encourage you to apply. Visit Supporting Aboriginal People or Supporting People with Disability for more information or speak to your talent team member to arrange any adjustments to how you interact with us.

Learn more about how to apply via Our recruitment process | Transport for NSW

#LI-Hybrid