Loading...
Lead Security Engineer (Application Security & Vulnerability Management) at Xero
XeroNZ: Auckland: Xero 4 (96 St Georges Bay Rd, Level 2 & 3)·1w ago
LeadFull-timeJavaScriptPythonJavaRustReactAWSGCPTerraformCI/CD
Salary Range
$153,000 - $207,000 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are looking for a Lead Engineer to join our team at Xero. This role focuses on application security and vulnerability management, driving secure software development practices across the organization.
Key Responsibilities
- →Embed automated security testing (SAST, DAST, SCA) and runtime tools into CI/CD pipelines
- →Develop and refine automated vulnerability detection processes using AWS, GCP, and Terraform
- →Lead threat modeling exercises to proactively assess and mitigate risks
- →Support software development with a security focus using .NET, Python, Java, or JavaScript
- →Act as a trusted advisor on complex security challenges across multiple teams
Requirements
- ✓Deep expertise in Application Security and Vulnerability Management, particularly in cloud-native applications
- ✓Strong understanding of DevSecOps practices, especially automated security testing and container security
- ✓Experience driving vulnerability management programs, including risk assessment and remediation strategies
- ✓Ability to influence without authority, aligning security priorities with business needs
- ✓Solid grasp of modern software delivery practices and coding in .NET, Python, Java, or JavaScript
- ✓Passion for developer enablement, making security accessible to engineers
