Senior Security Engineer (AppSec)

Xero is seeking a Senior Security Engineer (AppSec) to join their newly formed Application Security team. This role focuses on secure software development, DevSecOps, security automation, and vulnerability management. The position is crucial in securing Xero's software development lifecycle (SDLC), ensuring security is embedded into engineering workflows while enabling teams to deliver secure products at scale.

The ideal candidate will work cross-functionally with engineering, product, and security teams to build and improve security tooling, secure coding practices, and automated security controls. They should have a passion for security automation and security-as-code, with the ability to leverage tools to improve efficiency. The role requires a growth mindset and continuous adaptation to emerging threats and security trends.

Key responsibilities include developing secure coding practices, integrating automated security testing, building security guardrails, assisting with threat modeling, and managing security automation tools. The position requires extensive experience in Application Security, DevSecOps practices, and proficiency in programming languages like Python, Java, Go, or JavaScript.

Xero offers an attractive benefits package including generous paid leave, health insurance, mental wellbeing support, parental leave, and flexible working arrangements. The company's mission is to help supercharge businesses by automating routine tasks and providing actionable insights, making it an exciting opportunity for security professionals looking to make a significant impact.