AppSec Engineer

Talenza; Sydney; Hybrid; AUD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid working model

Investment in security tooling

Career development

Job summary

Talenza is seeking an experienced security engineer at the intersection of security and engineering to partner with development teams and strengthen application security across multiple technology domains.

You will lead triage, prioritisation, and governance of security findings while driving secure SDLC practices and helping engineering teams remediate risk efficiently. Hybrid Sydney CBD role with strong executive support.

Qualifications

• Demonstrated experience in Application Security or Security Engineering.
• Strong knowledge of SAST, DAST, SCA, API security, secrets management, container security, and infrastructure-as-code security.
• Solid understanding of OWASP Top 10, OWASP API Security Top 10, CWEs, and software supply chain risks.
• Experience implementing and assessing secure SDLC controls throughout the software development lifecycle.
• Strong GitHub security and repository governance experience.
• Excellent stakeholder engagement and communication skills, with the ability to translate technical findings into remediation actions.

Responsibilities

• Analyse, validate, and prioritise application security findings across a range of tooling and platforms.
• Drive remediation outcomes through close collaboration with engineering teams.
• Establish and govern secure SDLC controls across design, development, testing, deployment, and maintenance.
• Manage and enhance GitHub security controls, repository standards, and security integrations.
• Monitor remediation progress, provide risk reporting, and coordinate security exception processes where required.

Skills

Application Security

Security Engineering

Secure SDLC

OWASP Top 10

GitHub security

Tools

GitHub

SAST

DAST

SCA

Job description

• Leading Australian financial services organisation trusted by millions of customers.
• Significant investment in cyber security, cloud technologies, and modern engineering practices.
• Collaborative, purpose-driven culture with a strong focus on innovation, customer outcomes, and continuous improvement.

12 Month FTC | WFH Hybrid | Sydney CBD

About the Company

• Leading Australian financial services organisation trusted by millions of customers.
• Significant investment in cyber security, cloud technologies, and modern engineering practices.
• Collaborative, purpose-driven culture with a strong focus on innovation, customer outcomes, and continuous improvement.

About the Role

This role sits at the intersection of security and engineering, partnering closely with development teams to strengthen application security across multiple technology domains. You'll lead the triage, prioritisation, and governance of application security findings while driving secure SDLC practices and helping engineering teams remediate risk efficiently.

About You

• Demonstrated experience in Application Security or Security Engineering.
• Strong knowledge of SAST, DAST, SCA, API security, secrets management, container security, and infrastructure-as-code security.
• Solid understanding of OWASP Top 10, OWASP API Security Top 10, common CWEs, and software supply chain risks.
• Experience implementing and assessing secure SDLC controls throughout the software development lifecycle.
• Strong GitHub security and repository governance experience.
• Excellent stakeholder engagement and communication skills, with the ability to translate technical findings into practical remediation actions.

Key Responsibilities

• Analyse, validate, and prioritise application security findings across a range of security tooling and platforms.
• Drive remediation outcomes through close collaboration with engineering teams and technology stakeholders.
• Establish and govern secure SDLC controls across design, development, testing, deployment, and maintenance activities.
• Manage and enhance GitHub security controls, repository standards, and security integrations.
• Monitor remediation progress, provide risk reporting, and coordinate security exception processes where required.

Benefits

• Hybrid working model with flexibility and work-life balance.
• Opportunity to influence security practices across large-scale engineering environments.
• Join a high-performing cyber security function with strong executive support and ongoing investment.