AppSec Consultant (Code Security)

At ASB, we're committed to helping our customers get one step ahead by delivering secure, reliable technology that underpins every banking experience. As we continue to invest in our cyber security capability, we're looking for an experienced AppSec Consultant (Code Security) to join our Security Practice and help embed secure coding practices across the organisation. This is an opportunity to work alongside engineering teams at scale, influence how secure software is built, and help uplift security capability across one of New Zealand's largest technology environments. Based at ASB's C:Drive campus in Albany, you'll be at the forefront of secure software development and Application Security. About the Team The CAT Team sits within ASB's Security Practice and plays a critical role in helping protect the bank, our customers and our technology platforms. Combining penetration testing, application security and secure design expertise, the team works alongside engineers, architects and delivery teams to identify security risks early, uplift security capability and embed secure practices across the software development lifecycle. From validating code vulnerabilities through to threat modelling and ethical hacking, the team helps ensure security is built into everything we do. About the Role As an AppSec Consultant (Code Security), you'll act as a trusted technical partner to engineering teams across ASB. You'll help developers understand, assess and remediate code vulnerabilities while promoting secure coding practices and security awareness. Working closely with developers, you'll review vulnerability findings, validate potential security issues, support remediation efforts and help build security capability through education, coaching and the Security Champions programme. Key Responsibilities Review and assess code vulnerability findings and validate security risks Support engineers and developers in remediating security vulnerabilities Investigate and challenge potential false positives identified through security tooling Provide practical guidance on secure coding practices and software assurance Lead application security assessments including code reviews and security reviews Support secure development practices throughout the software development lifecycle Work closely with Engineering, Quality Assurance and Security teams Help drive security awareness, training and capability uplift across engineering communities Contribute to the Security Champions programme and support the development of secure coding capability across ASB Identify opportunities to improve application security processes, tooling and practices About You You'll bring a strong technical foundation and enjoy working directly with engineers to solve security challenges. You may come from a software engineering, security engineering, penetration testing or Application Security background, but above all you'll be passionate about helping teams build secure software. Key Skills and Experience Strong understanding of Application Security, secure coding and software assurance principles Experience reviewing, assessing or supporting remediation of security vulnerabilities Ability to engage confidently with software engineers and technical stakeholders Experience with modern development practices including Agile, DevOps or DevSecOps Familiarity with security tooling such as SAST, DAST, IAST or Software Composition Analysis Understanding of common application vulnerabilities and mitigation approaches Knowledge of cloud environments including Azure, AWS or container-based platforms Strong communication skills and the ability to explain complex technical concepts clearly Previous experience in Application Security, Security Engineering, Software Engineering or a related discipline Working for ASB At ASB, we know that great people drive great outcomes. That's why we provide a supportive environment where you can grow your career, work with talented people and make a real impact. Some of our benefits include: Flexible and hybrid ways of working Additional leave benefits including ASB Bank Holidays Health, life and income protection insurance Banking benefits and product discounts Generous parental leave support Learning and development opportunities Employee banking packages and financial wellbeing support Access to wellbeing initiatives and employee assistance programmes Apply Today If you're passionate about secure software development and want to help shape Application Security practices within one of New Zealand's largest technology environments, we'd love to hear from you. Apply online today and help us build a more secure future for ASB. To serve a diverse community, we need a diverse organisation. We encourage applicants from all backgrounds who bring unique perspectives and thinking styles that add to the culture and performance of our team. #J-18808-Ljbffr