See all roles

Senior Security Engineer (AppSec)

Work from home Full-time role Hiring

Our Purpose

At Xero, we’re here to help you supercharge your business. We do this by automating routine tasks, surfacing actionable insights and connecting businesses with the right data, advisors and apps. When that happens, we’re not only making life better for small business, we’ll be building a stronger economy that can change the world.

About the role

Sitting within a newly formed Application Security team, this role will focus on secure software development, DevSecOps, security automation, and vulnerability management.

Day to day, you'll work cross-functionally with engineering, product, and security teams to build and improve security tooling, secure coding practices, and automated security controls that empower developers to plan, write, test, and deploy secure applications efficiently.

We're looking for somebody with a passion for security automation and security-as-code, who can leverage tools to improve efficiency. Coupled with a growth mindset, continuously learning and adapting to emerging threats and security trends.

This position will play a key role in securing Xero’s software development lifecycle (SDLC), ensuring that security is embedded into engineering workflows while enabling teams to deliver secure products at scale.

What you'll do

  • Develop and implement secure coding practices, working closely with engineers to uplift security awareness and adoption
  • Integrate automated security testing (SAST, DAST, SCA, IaC scanning) and security policy enforcement into CI/CD pipelines to identify vulnerabilities early.
  • Work with DevOps and engineering teams to build security guardrails, ensuring frictionless security adoption; driving a "shift-left" security mindset by enabling teams with secure coding guidance, tooling, and risk-based security testing.
  • Assist engineering teams in threat modeling to proactively identify and mitigate security risks in software designs. Ultimately looking to improve visibility and reporting of application security risks, helping teams understand and measure their security posture.
  • Build and manage security automation tools, integrating them into existing developer workflows; contribute to DevSecOps initiatives, ensuring security controls are scalable, efficient, and developer-friendly.
  • Participate in cross-functional security initiatives, working on security improvements that impact multiple teams. Continuously evaluate and improve security tools, scanning coverage, and security-as-code implementations.
  • What you'll bring with you

  • Extensive experience in Application Security, Secure Software Development, and DevSecOps practices.
  • Hands-on experience with automated security testing tools, including SAST, DAST, SCA, and IaC security scanning.
  • Proficiency in programming and scripting languages (Python, Java, Go, JavaScript, or similar); coupled with a strong understanding of secure coding principles, OWASP Top 10, SANS CWE, and software security best practices.
  • Hands-on experience securing APIs, microservices, cloud-native applications, and serverless architectures
  • Experience integrating security controls into CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI, or similar).
  • Solid background in vulnerability management, risk assessment, and application security triage; including incident response, investigating and mitigating application security breaches.
  • Additional Information

    Research has shown that women and underrepresented groups are less likely to apply to jobs unless they meet every single competency or experience . If you are excited about this role, but your past experience doesn't align perfectly, we encourage you to apply anyway. You could be just the right person for this role and Xero. If you have any support or access requirements, we encourage you to advise us at time of application and throughout the interview process.

    Why Xero?

    Offering very generous paid leave to use however you’d like (plus statutory holidays!), dedicated paid leave to care for your physical and mental wellbeing as well as an Employee Assistance Program to access mental health care for you and your family, free medical insurance, wellbeing and sports programmes, employee resource groups, 26 weeks of paid parental leave for primary caregivers, an Employee Share Plan, beautiful offices, flexible working, career development, and many other benefits that reflect our human value, you’ll do the best work of your life at Xero.

    Apply to this Job

    You might like

    Sales Development Representative (SDR)

    Work from home Full-time role

    Data Engineer

    Work from home Full-time role

    Work-from-Home Tester - Try Online Side Gigs and Give Feedback – Amazon Store

    Work from home Full-time role

    Oracle OCI Consultant - TechResource Services

    Work from home Full-time role

    Senior Site Reliability Engineer

    Work from home Full-time role

    Senior Regulatory Affairs Manager - Screening

    Work from home Full-time role

    Portfolio Customer Success Manager

    Work from home Full-time role

    Financial Analyst

    Work from home Full-time role

    Senior Product Business Intelligence Analyst (UK Remote)

    Work from home Full-time role

    IT-Consultant - Digitalisierung (m/w/d)

    Work from home Full-time role

    Art Adviser – Secondary Market (18th–20th Century Art) Remote

    Work from home Full-time role

    Remote Physical Therapy - Georgia

    Work from home Full-time role

    Experienced Customer Experience Representative - Delivering Exceptional Service and Driving Customer Satisfaction at Blithequark

    Work from home Full-time role

    BCBA (Board Certified Behavior Analyst): Prince George's County, MD

    Work from home Full-time role

    [Fractional] CFO w/ Fundraising Experience (Equity-Based)

    Work from home Full-time role

    Part-Time and Full-Time At Home Customer Service Rep

    Work from home Full-time role

    [Remote] Senior Site Reliability Engineer

    Work from home Full-time role

    MLTSS Supervisor, RN/SW

    Work from home Full-time role

    Dynamic Math Tutor – Excel Zone Work‑Study (Hybrid Remote & On‑Campus) – Empower Student Success in Algebra, Statistics & Physics at Community College of Denver

    Work from home Full-time role

    Customer Service Representative

    Work from home Full-time role