AI Cloud Security Engineer: App & DevSecOps

Matchbox; Sydney; Hybrid; AUD 180,000 - 250,000; Full time

Job summary

Firmus Technologies in Sydney, Australia, is seeking a Senior Security Engineer to own application security for Firmus AI Cloud and related software. You will implement automation, secure APIs, and enforce tenant isolation across services in a public-cloud, multi-tenant environment.

The role requires hands-on coding in Python/Go/TypeScript and strong experience with OAuth/OIDC/JWT, SBOM, and security design reviews.

Qualifications

• Bachelor's degree in computer science or related field.
• 7+ years in application/product security or security-focused software engineering.
• Experience securing a public cloud or multi-tenant platform with public APIs.
• Knowledge of OWASP Top 10 and OWASP API Security Top 10.

Responsibilities

• Own CI/CD security gates in production (SAST, DAST, SCA, secrets detection, SBOM).
• Lead threat modelling and secure design reviews for multi-tenant services.
• Define authentication, authorization, tenant isolation and secret handling standards.

Skills

CI/CD security

SAST/DAST/SCA

Threat modelling

OAuth/OIDC/JWT

API security

Python/Go/TS

Cloud security

Multi-tenant security

Automation

Education

Bachelor's degree in computer science

Tools

AWS

GCP

Azure

Job description

Firmus Technologies in Sydney, Australia, is seeking a Senior Security Engineer to own application security for Firmus AI Cloud and related software. You will implement automation, secure APIs, and enforce tenant isolation across services in a public-cloud, multi-tenant environment.

The role requires hands-on coding in Python/Go/TypeScript and strong experience with OAuth/OIDC/JWT, SBOM, and security design reviews.