·       Work with the rest of the security operations team to proactively identify vulnerabilities and validate controls across the Woolworths environment.

·       Support the team in responding to security incidents.

·       Work with, and coordinate, external providers where and when relevant.

·       Assist with maturing the red and purple teaming maturity, leveraging technology and automation with the goal of continual control validation.

·       Integrate security practices into the SDLC and DevSecOps under the guiding principles of ‘shift left’ and ‘security by default’.

·       Provide expert guidance on, and where relevant maintain and enhance the toolsets required for mature application security covering pen testing, secure coding, source code analysis and vulnerability management.

·       Investigate new approaches, technologies, and automation to mature AppSec.

·       Assist with AppSec training.

·       Assist with managing a risk-based methodology for application and infrastructure penetration testing.

·       Provide application and infrastructure penetration testing according to the methodology and where relevant, in line with compliance requirements (e.g., PCI).

·       Help drive and validate remediation of findings.

·       Consult with application development teams during projects and initiatives.

·       Provide AppSec reporting for operational security dashboards.

·       Provide application security guidance via documentation, standards, and collaboration.