Cloud DevSecOps Engineer - Secure Coding & Automation

Talenza; Sydney; Hybrid; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible hybrid work

Wellbeing focus

Job summary

Talenza is seeking a highly technical security engineer to own remediation across code, dependencies, and CI/CD environments. You will partner with platform and engineering teams to embed security into the software delivery lifecycle, improve guardrails, and reduce vulnerabilities at scale.

You will bring hands-on expertise in SAST/DAST/SCA, cloud-native tech, containers, and IaC, with strong scripting in Node.js, TypeScript, and Python, to strengthen security across modern cloud applications.

Qualifications

• Proven remediation of security findings across modern app and API environments.
• Strong scripting and development in Node.js, TypeScript, Python.
• Experience with SAST/DAST/SCA and secure code remediation practices.
• GitHub security administration and repository governance experience.
• Cloud-native tech, containers, serverless platforms, and IaC.
• CI/CD security engineering, automated security testing, DevSecOps.

Responsibilities

• Own and execute remediation across application code, dependencies, repos, and CI/CD.
• Strengthen security guardrails, reduce recurring vulnerabilities, embed security in SDLC.
• Coordinate remediation with engineering, product, and platform teams.
• Develop security playbooks, standards, and governance artefacts to reduce risk.
• Enhance GitHub and CI/CD security controls, including secrets protection.

Skills

Node.js

TypeScript

Python

Security testing

GitHub security

CI/CD security

DevSecOps

Cloud-native

Containers

Infrastructure-as-code

Tools

SAST

DAST

SCA

Job description

Talenza is seeking a highly technical security engineer to own remediation across code, dependencies, and CI/CD environments. You will partner with platform and engineering teams to embed security into the software delivery lifecycle, improve guardrails, and reduce vulnerabilities at scale.

You will bring hands-on expertise in SAST/DAST/SCA, cloud-native tech, containers, and IaC, with strong scripting in Node.js, TypeScript, and Python, to strengthen security across modern cloud applications.