# Principal Advisor Cyber Security Architecture (AppSec) at Rio Tinto

Rio Tinto is hiring a Principal Advisor Cyber Security Architecture (AppSec) in Perth, Australia. Level rates it Little AI ●○○○; you can [apply on Rio Tinto](https://jobsbylevel.com/go/f5029220-e89c-4812-aa01-185b447bf5dc?utm_medium=ai-agent).

AI Level 1, AI centrality 33 out of 100. Perth.

## Details

- Company: [Rio Tinto](https://jobsbylevel.com/companies/rio-tinto)
- AI level: AI Level 1 (score 33 out of 100)
- Location: Perth
- Posted: October 22, 2026
- Apply: https://jobsbylevel.com/go/f5029220-e89c-4812-aa01-185b447bf5dc?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=principal-advisor-cyber-security-architecture-appsec-at-rio-tinto-22c5f2

## Description

Own and shape Application Security architecture, standards and services across Rio Tinto Lead our Secure SDLC standards and manage the Snyk application security capability Permanent full-time opportunity based in Perth or Brisbane, working with a practical and collaborative Cyber Architecture team We're Finding Better Ways™ to provide materials the world needs, now and in the future. Our values - care, courage and curiosity - guide how we work and how we treat each other. About the role We are looking for a Principal Adviser - Cyber Security Architecture (AppSec) to lead the Application Security domain within Cyber Security. This role owns the strategy, standards, architecture and roadmap for secure software development and application security services across Rio Tinto. You will work closely with Enterprise Architecture, software engineering, platform teams and business stakeholders to make security a practical part of how applications are designed, built, deployed and supported. The role combines enterprise security architecture with hands-on ownership of key Application Security capabilities. It suits someone who can set direction, work directly with development teams, and turn security requirements into standards, patterns, tooling and practical guidance. What you'll be doing Reporting to the Manager of Cyber Security Architecture and working within the Cyber Architecture team, you will: Own the enterprise Application Security strategy, standards, reference architectures and service roadmap Lead and continually improve Secure SDLC, DevSecOps, threat modelling and secure application development practices. Work with development, architecture and platform teams to embed practical security requirements into engineering standards, delivery processes and CI/CD pipelines Own and support Application Security tooling and services, including Snyk and integrations with GitHub, Azure DevOps and Artifactory, working with vendors and internal teams to improve adoption and value Guide teams in identifying, prioritising and remediating application and dependency vulnerabilities, and improve the processes used to manage them Define reusable security patterns and requirements for applications, APIs, cloud-native workloads, containers, secrets and AI-enabled solutions Review solution designs for higher-risk initiatives, and provide clear security advice to projects and development teams Build strong relationships across Cyber, IS&T and the development community, mentor other architects and help lift Application Security capability across the organisation About you We're looking for someone with strong Application Security experience who can operate at an enterprise scale while remaining practical and approachable. You do not need to meet every 'helpful for success' item to apply. If you bring relevant experience and are interested in the opportunity, we encourage you to submit an application. Required for Success A commitment to the safety of yourself and your team Strong experience in Application Security architecture, Secure SDLC, DevSecOps, threat modelling, vulnerability management and security-by-design Experience creating and embedding security standards, patterns and guidance across development teams in a large, complex organisation Proven experience owning or supporting Application Security platforms such as Snyk, including developer onboarding, platform integrations, service improvement and vulnerability remediation A practical communication style and the ability to build strong working relationships across Cyber, architecture, engineering, platform and business teams Relevant qualifications or certifications in cyber security, information security, software engineering or a related discipline, or equivalent practical experience Helpful for Success Experience with GitHub, Azure DevOps, Artifactory, CI/CD security, API security, secrets management, container security or software supply chain security Experience supporting

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/principal-advisor-cyber-security-architecture-appsec-at-rio-tinto-22c5f2

Source: https://jobsbylevel.com/jobs/principal-advisor-cyber-security-architecture-appsec-at-rio-tinto-22c5f2

## Cite this page

Level. https://jobsbylevel.com/jobs/principal-advisor-cyber-security-architecture-appsec-at-rio-tinto-22c5f2.

Get job alerts: https://jobsbylevel.com/newsletter