HUB24 leads the wealth industry as the best provider of integrated platform, technology and data solutions. At HUB24, we know the smartest investments start with our people. We are innovative and ambitious, and we move fast.

At HUB24, we empower our employees to bring their ideas and creativity to work. Rather than getting bogged down in bureaucracy and red tape, we build a culture that supports our team members to have a real impact on our business and the success of our customers.

HUB24 Limited is a company listed on the Australian Securities Exchange (ASX: HUB)

THE HUB24 STORY  

We think creatively and we’re not constrained by traditional thinking or barriers to success. We’re led by experts, realists with ideas, grounded in commercial reality who are bold enough to visualise the future a little differently and to advocate for what matters to our clients. We are here to lead change and are committed to empowering better financial futures for more Australians. 

Benefits and Life at HUB24

Learn more about our employee benefits HERE.

Job Summary:

Responsibilities:

The primary role of the Application Security Lead is to drive improvement and lead the developing practices and standards that ensure the integrity and security of applications deployed or being developed within HUB24. 

• Lead collaboration with development and operations teams to uplift security across the SDLC.

• Act as the escalation point for all Application Security matters.

• Coordinate remediation across the vulnerability lifecycle.

• Maintain strong adherence to security policies, procedures, and regulatory requirements.

• Support documentation and governance across technical and user domains.

• Some after-hours and on-call work required (allowances apply).

Requirements:

• Strong experience with Web Application Firewalls (Imperva or AWS WAF).

• Experience with SAST, DAST, and SCA tooling.

• Knowledge of .NET, C#, Python (preferred).

• Experience with authentication and API security best practices.

• Threat modelling, web and API security familiarity.

• Experience mentoring or leading small teams (highly regarded).

• Relevant certifications (CISSP, OSCP, CSSLP) are desirable.

The Recruitment Process

• Acknowledgement email once your application has been submitted. 

• Our Talent team will start reviewing your application. If unsuccessful, you will be notified. 

• If your application progresses to the next stage, our Talent team will be in touch to discuss your alignment with the role. 

• If you’re a person with an impairment or disability, this is an opportunity to share with us any accessibility requirements that you may have for the role.

• Should you require any accommodations to the recruitment process, please email [email protected], and one of our team will contact you. 

• Interviews can happen virtually or face-to-face with the hiring manager or other members of the broader team. Depending on the role, there may be more than two interviews. 

• Communication of outcomes to successful and unsuccessful candidates and feedback provided. 

As part of our process, a police check will be conducted on all successful candidates. Further details on our HUB24 Group Recruitment Privacy Collection notice can be found here. 

2024 Circle Back Initiative Employer – we commit to respond to every applicant. 

Endorsed by WORK180, we are proud to be recognised as an employer of choice for women. 

We have been nominated and placed on the BOSS Best Places to work list. 

Seek Star Awards 2024 - Nominated as a finalist for the Best Employer Brand Initiative

HUB24 is an equal opportunity employer. We are committed to creating an inclusive environment where diverse perspectives are valued and every individual is treated with respect. We welcome applications from people of all backgrounds, including Aboriginal and Torres Strait Islander peoples, people with disabilities, people from culturally and linguistically diverse communities, and people of all gender identities and sexual orientations. If you require adjustments to the recruitment process or have accessibility requirements, please let us know – we’re here to support you