Executive | Application Security Engineer

Hybrid

Hyderabad, Telangana, IndiaPosted 2 months agoWebsite

Apply on LinkedIn →

At a Glance

PythonJavaGoCI/CDThreat ModelingCode Review

About This Role

Join the Application Security (AppSec) team responsible for helping Macquarie engineers create better more secure software. The AppSec team works closely with other teams inside the Group Technology and Security (GTS) division to create effective policies, define AppSec best practices, and drive adoption and optimisation of developer security tools. In this role, you will play a critical role in integrating security practices into the software development lifecycle and collaborate with development teams to create a secure development environment and enhance the security posture of applications. Macquarie is a global financial services group operating in 30 markets with 57 years of unbroken profitability, empowering employees to shape fulfilling careers that create value.

Responsibilities

Integrate security practices into the software development lifecycle
Collaborate with development teams to create a secure development environment
Enhance the security posture of applications
Work with other teams in Group Technology and Security division to create effective policies
Define AppSec best practices
Drive adoption and optimisation of developer security tools

Requirements

SASTSCADASTDevSecOpsCI/CDJavaPythonGo

4-6 years' experience in the application security domain
Knowledge and hands-on experience in securing applications throughout the software development lifecycle
Experience identifying security weaknesses through threat modelling or secure code review
Familiarity with Static Application Security Testing (SAST)
Familiarity with Software Composition Analysis (SCA)
Familiarity with Container Security
Familiarity with Infrastructure as Code (IaC) Security
Familiarity with API Security
Familiarity with Dynamic Application Security Testing (DAST)
Familiarity with Runtime Application Self-Protection (RASP)
Experience with GitHub Advanced Security or other related tools
Experience in DevSecOps practices and tools
Security engineering experience
Infrastructure-as-code experience
CI/CD experience
Automation experience
Application development experience (desirable)
Proficiency in programming languages such as Java, Python, Go, or similar
Experience or strong interest in agentic engineering tools (e.g., Claude Code, GitHub Copilot)

Benefits & Perks

1 wellbeing leave day per year

26 weeks' paid maternity leave or 20 weeks' paid parental leave for primary caregivers

12 days of paid transition leave upon return to work

6 weeks' paid leave for secondary caregivers

Company-subsidised childcare services

2 days of paid volunteer leave

Donation matching

Comprehensive medical and life insurance cover

Parental medical insurance plan option

Virtual medical consultations extended to family members

Access to Employee Assistance Program with counselling and coaching services

Wide range of learning and development opportunities

Professional membership or subscription reimbursement

Hybrid and flexible working arrangements

Work from home equipment reimbursement

About Macquarie Group

Macquarie Group Limited, commonly known as Macquarie, is a diversified financial services group headquartered in Sydney, Australia. Established in 1969, Macquarie operates in 31 to 34 markets worldwide, including major hubs in Sydney, London, New York, Singapore, and Hong Kong. The company employs over 20,600 people and manages approximately $403.4 billion AUD in total assets. Macquarie's operations are organized into five key business segments: Macquarie Asset Management, Banking and Financial Services, Commodities and Global Markets, Macquarie Capital, and Corporate. The company offers a wide range of financial products and services, including asset management, investment banking, retail and business banking, and commodities trading. Macquarie serves a diverse client base, including institutional clients, corporations, government entities, and retail customers, with a strong emphasis on infrastructure and renewable energy investments. The group is recognized for its expertise in various sectors and its commitment to empowering clients for sustainable growth.

Industry

financial services

Employees

21,000

1987 engineers

Revenue

$36B

Website

Visit →

Security at Macquarie Group

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

Macquarie's AppSec mission is to help engineers create more secure software, integrate security throughout the SDLC, and create secure development environments.
The team acts as a business enabler, working closely with engineering teams and promoting developer security-tool adoption.
AppSec translates security risk into practical strategies that support rather than hinder technology adoption.
The risk philosophy manages cyber and information-security risk through an operational risk-management framework that identifies and assesses threats, detects and manages vulnerabilities, mitigates threats, and manages residual risk according to risk appetite.
Stated priorities include policy and best-practice definition, developer-tool adoption and optimisation, threat modelling, secure code review, CI/CD security, software-supply-chain security, cloud and container security, vulnerability management, automation, and secure adoption of AI and modern developer workflows.

Security Team

The AppSec Team operates as a dedicated Application Security team within Group Technology and Security.
The team works with internal technology teams to define AppSec policies and practices, integrate security into the software development lifecycle, and drive adoption of developer security tools.
Runtime Security Engineering is part of the Application Security Engineering team within the Corporate Operations Group and Technology division.
The cybersecurity team reports through the CISO and is globally distributed across Australia, the United States, the United Kingdom, the Philippines, and India with approximately 100 staff.

Key Initiatives

Macquarie integrates security into the SDLC with threat modelling, secure code review, CI/CD pipeline controls, and secure software-supply-chain controls.
The company operates a public Vulnerability Disclosure Program accepting suspected vulnerability reports from security researchers, with validation within 21 days for 75% of submissions.
A Vulnerability Management Specialist role covers CVE research, triage, quantification, exploitability, compensating controls, dependency analysis, and translation of technical findings into risk language.
Recent initiatives include 2026 AppSec recruitment covering secure development, runtime security, AI and DevSecOps, Secure by Design, and vulnerability management.
The Runtime Security Engineering platform roadmap covers Web Application Firewalls, API security, vulnerability detection, detection engineering, and public/private cloud networking.
Recurring security activities include penetration testing and red-team exercises.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.

Interested in this role?

Apply on LinkedIn