Welcome to the Application Security Lead role at DuluxGroup.
We help our consumers imagine and create better places and spaces in which to live and work. As a key player in our IT & Digital Enablement function, you will drive future growth and success by leading the development and execution of an application security strategy.
About Us
DuluxGroup has its origins dating back to 1918, with a heritage in decorative paint for Australian and New Zealand homes. Today, we are a leading marketer and manufacturer of premium branded products that protect, maintain and enhance the spaces and places in which we live and work.
Our people and values are the key reason behind our continued success – we now have over 8,000 employees globally.
Your Role
The Application Security Lead is a key role within IT&DE's Cyber Security team, responsible for managing application security risks and establishing robust cyber security practices.
Key Responsibilities:
* Developing and executing an application security strategy
* Partner with development teams to integrate security controls into the SDLC
* Implement automation tools for security testing and integration into CI/CD pipelines
* Lead threat modeling sessions and security architecture reviews
* Providing regular reporting to stakeholders
Benefits
At DuluxGroup, we believe in investing in our employees' well-being and careers. Some of the benefits include:
* Comprehensive, holistic health and wellbeing support
* Private health insurance extras cover up to $1000 out of pocket gap costs annually
* Community Action Day and other community programs
* Market leading Learning and Development initiatives
* 20 weeks paid parental leave (primary carers) and 2 weeks paid partner leave
* Employee recognition programs
* Generous discounts on DuluxGroup products
Skills & Experience
To succeed in this role, you will need:
* Experience with application security tooling (SAST, DAST, SCA)
* Experience working with development teams in an agile environment
* Knowledge of security engineering and software engineering principles
* Strong understanding of modern web technologies, programming languages, frameworks and cloud platforms
* Strong problem-solving skills and ability to work collaboratively with cross-functional teams
We foster a culture of inclusion, diversity, and flexibility. We care about your wellbeing and prioritise your safety in everything we do.