DevSecOps Engineer: Secure CI/CD & Cloud | Hybrid

Talenza; Sydney; Hybrid; AUD 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid working

Flexible work arrangement

Modern security tooling

Job summary

Talenza in Sydney CBD is seeking a highly technical security engineer to own and execute remediation across application code, dependencies, repositories, and CI/CD environments. You will partner with platform and engineering teams to improve guardrails and reduce recurring vulnerabilities.

The role requires hands-on SAST/DAST/ SCA expertise, strong scripting in Node.js/TypeScript/Python, and experience with cloud-native tech, containers, and DevSecOps best practices.

Qualifications

• Proven experience remediating security vulnerabilities across modern app/API environments.
• Strong development and scripting capabilities in Node.js, TypeScript, and Python.
• Hands-on security testing: SAST/DAST/SCA and secure code remediation.
• GitHub security administration and repository governance experience.
• Experience with cloud-native technologies, containers, serverless platforms, and infrastructure-as-code.
• Knowledge of CI/CD security engineering and DevSecOps practices.

Responsibilities

• Remediate security findings from automated scanners and assessments.
• Mitigate risks from open-source and third-party dependencies via upgrades, replacements, or removals.
• Strengthen GitHub and CI/CD security controls, including repository baselines, secrets protection, and security automation.
• Collaborate with engineering, product, and platform teams to coordinate remediation activities.
• Develop security guardrails, engineering standards, playbooks, and governance artefacts that reduce recurring risk.

Skills

Node.js

TypeScript

Python

SAST/DAST/SCA

GitHub security

Cloud-native technologies

CI/CD security

Job description

Talenza in Sydney CBD is seeking a highly technical security engineer to own and execute remediation across application code, dependencies, repositories, and CI/CD environments. You will partner with platform and engineering teams to improve guardrails and reduce recurring vulnerabilities.

The role requires hands-on SAST/DAST/ SCA expertise, strong scripting in Node.js/TypeScript/Python, and experience with cloud-native tech, containers, and DevSecOps best practices.