Application Security Engineer at LEAP Legal Software

Sydney, New South Wales, Australia -

Full Time

Start Date

Immediate

Expiry Date

03 Aug, 26

Salary

0.0

Posted On

05 May, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Penetration Testing, Web Application Security, API Security, Infrastructure Security, Red Teaming, Threat Modelling, Code Review, Python, Bash, Powershell, Vulnerability Reporting, Vulnerability Remediation, Cloud Security, Critical Thinking, Time Management, Stakeholder Collaboration

Industry

Software Development

Description

About LEAP LEAP is the leading provider of Legal Practice Management Solutions in the world and is part of ATI – one of the largest international LegalTech companies. For more than 30 years, our curiosity and commitment to continual improvement has kept us reimagining productivity tools for lawyers and their staff to support our guiding purpose, to ‘Help lawyers who help people’. The market-leading software we develop, and support is used by more than 71,000 lawyers and their staff in small and medium-sized law firms. Working alongside our international team of passionate high achievers, you’ll join a fast-growing technology business where things seldom stay the same for long. With more than 1000 smart, caring and ambitious ‘LEAPsters’ working together across Australia, Canada, the United States, the United Kingdom, the Republic of Ireland, Poland and New Zealand, you’ll find yourself in good company here. What you'll do We’re looking for an Application Security Engineer / Penetration Tester to play a key role in securing our applications to protect our clients’ data. In this role, you will perform security testing across applications, infrastructure, and cloud services to identify vulnerabilities and validate their exploitability. This is a hands-on technical role that translates technical findings into clear risk statements and remediation guidance. Working alongside the broader security team and reporting directly to our Application Security Team Lead, you’ll collaborate with stakeholders across Development, DevOps, IT and Compliance, ensuring alignment on priorities and outcomes. To make this happen, you will: Conduct regular Penetration Testing across Web App, APIs, Internal and External Infrastructure. Red Teaming, Threat modelling and Code reviews Create detailed vulnerability reports and share with key stakeholders Automate daily tasks, tests and other regular admin tasks with automation scripts ie Python, Bash, Powershell etc Communicate findings and recommendations clearly and effectively Track vulnerability remediation Coordinate third-party penetration tests and support compliance and audit requirements. What you'll bring Bachelor’s degree in IT or a related field. Pentesting certifications will be highly regarded (OSCP, OSCP+, CRTO, CRTP, GPEN etc) Broad testing background across Web App, APIs, Internal and External Infrastructure. Experience producing structured penetration test reports that demonstrate the attack path with supporting evidence, business impact and detailed remediation advice. it would be a bonus if you’ve worked with tech, SaaS or Startup companies. Ability to approach complex problems with creativity and critical thinking. Excellent time management skills with the ability to prioritize tasks and manage multiple competing priorities. You are the type of person who LEAP is an inclusive, people-first company committed to breaking down institutional barriers that keep people from reaching their potential. If you meet some, but not all the requirements above, we encourage you to still submit your application. Why join LEAP? Your work matters. Helping lawyers help people sits at the heart of everything we do. We solve real world problems that improve and support local, everyday law firms. So they can do their best work for the people in the communities they serve. Make an impact. You won’t be another ‘cog in the wheel’ here. We give full trust and autonomy for you to be heard, to work on big & complex projects – and to make a real difference. Work with a group of authentic, passionate people who love what they do. Flexible and hybrid working. We'd like to find this person in Sydney, but we want you to work in a way that suits you and we're open to flexible arrangements that support you. Grow your career with us. Our founder Christian Beck has been building legal tech businesses for over 30 years. There are opportunities galore to expand your career based on where your interests lie. We're not afraid to pivot based on market conditions - you will always have the opportunity to stay ahead of the curve and do your best work here. Have fun with us. Celebrations. Socials. Sports teams. Access to sailing and yacht events. We value your well-being - enjoy an additional paid wellbeing day every year, free gym membership, corporate dental plan and weekly massages in the office. Work in a new, beautiful office space – with a catered lunch and breakfast every week, fully stocked kitchen and an on-site barista. Access to LEAP Home - a program unique to LEAP to support you in buying your primary residence. #LI-AH1

Responsibilities

Perform security testing across applications, infrastructure, and cloud services to identify and validate vulnerabilities. Translate technical findings into risk statements and remediation guidance while collaborating with Development, DevOps, and IT teams.