Hybrid AppSec Engineer: Secure SDLC & GitHub Governance

Talenza; Sydney; Hybrid; AUD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid working model

Investment in security tooling

Career development

Job summary

Talenza is seeking an experienced security engineer at the intersection of security and engineering to partner with development teams and strengthen application security across multiple technology domains.

You will lead triage, prioritisation, and governance of security findings while driving secure SDLC practices and helping engineering teams remediate risk efficiently. Hybrid Sydney CBD role with strong executive support.

Qualifications

• Demonstrated experience in Application Security or Security Engineering.
• Strong knowledge of SAST, DAST, SCA, API security, secrets management, container security, and infrastructure-as-code security.
• Solid understanding of OWASP Top 10, OWASP API Security Top 10, CWEs, and software supply chain risks.
• Experience implementing and assessing secure SDLC controls throughout the software development lifecycle.
• Strong GitHub security and repository governance experience.
• Excellent stakeholder engagement and communication skills, with the ability to translate technical findings into remediation actions.

Responsibilities

• Analyse, validate, and prioritise application security findings across a range of tooling and platforms.
• Drive remediation outcomes through close collaboration with engineering teams.
• Establish and govern secure SDLC controls across design, development, testing, deployment, and maintenance.
• Manage and enhance GitHub security controls, repository standards, and security integrations.
• Monitor remediation progress, provide risk reporting, and coordinate security exception processes where required.

Skills

Application Security

Security Engineering

Secure SDLC

OWASP Top 10

GitHub security

Tools

GitHub

SAST

DAST

SCA

Job description

Talenza is seeking an experienced security engineer at the intersection of security and engineering to partner with development teams and strengthen application security across multiple technology domains.

You will lead triage, prioritisation, and governance of security findings while driving secure SDLC practices and helping engineering teams remediate risk efficiently. Hybrid Sydney CBD role with strong executive support.