Home/Cyber Engineering/Fintech
Specialisms - Cyber Engineering - Fintech
AppSec demand at Australian financial services outstrips supply more than any other cyber profile in 2026. Re:Sourced recruits application security engineers, security architects and platform defenders for banks, payments companies and lending scale-ups where CPS 234 compliance and board-level security accountability shape every brief.
The demand surge
Three forces collided: APRA CPS 234 enforcement posture hardened, payments scale-ups reached the size where dedicated AppSec teams became mandatory rather than aspirational, and the threat environment around financial APIs intensified. The result is sustained AppSec hiring at CBA, Westpac, Macquarie and the entire payments tail simultaneously - all fishing in the same small pool.
Engineers who can read code and threat-model in the same session price at the top of the cyber band: AUD 185-200k base senior in Sydney, base only, 25th-75th percentile. Security architects with regulated-environment experience reach AUD 200-220k.
The profile
AppSec in fintech means secure SDLC ownership across payments rails and core ledgers, API security at transaction scale, and the developer-education role that makes security ship rather than block. Architecture roles add CPS 234 control mapping, third-party risk and the board-paper writing that regulated security leadership requires.
The career pattern that works: engineers from big-four security teams moving to payments scale-ups, bringing governance fluency to environments that need to formalise fast. We maintain active relationships across both sides of that flow.
Submit a brief
30 minute working session. No fee until placement. Replacement inside 90 days.