Platform Security Engineer: DevSecOps & Cloud Guardrails

Talenza; Sydney; Hybrid; AUD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible hybrid working

Security tooling impact

wellbeing emphasis

Job summary

Talenza in Sydney CBD is seeking a highly technical security engineer responsible for owning security remediation across application code, dependencies, repositories, and CI/CD environments.

You'll work with platform and engineering teams to improve guardrails, reduce recurring vulnerabilities, and embed security into the software delivery lifecycle.

The role requires hands-on remediation of findings from automated scanners, upgrades of risky dependencies, and governance artefacts to reduce risk.

Qualifications

• Proven experience remediating security vulnerabilities across modern application and API environments.
• Strong development and scripting capability using Node.js, TypeScript, and Python.
• Hands-on experience with SAST, DAST, SCA, and secure code remediation practices.
• Strong GitHub security administration and repository governance experience.
• Experience working with cloud-native technologies, containers, serverless platforms, and infrastructure-as-code.
• Practical knowledge of CI/CD security engineering, automated security testing, and DevSecOps best practices.

Responsibilities

• Remediate application security findings identified through automated scanning and security assessments.
• Resolve vulnerable open-source and third-party dependency risks through upgrades, replacement, or removal strategies.
• Enhance GitHub and CI/CD security controls, including repository baselines, secrets protection, and security automation.
• Partner with engineering, product, and platform teams to coordinate and validate remediation activities.
• Develop security guardrails, engineering standards, playbooks, and governance artefacts that reduce recurring risk.

Skills

Node.js

TypeScript

Python

SAST

DAST

SCA

GitHub security

CI/CD security

DevSecOps

Cloud-native

Containers

Serverless

IaC

Tools

GitHub

CI/CD tooling

Job description

Talenza in Sydney CBD is seeking a highly technical security engineer responsible for owning security remediation across application code, dependencies, repositories, and CI/CD environments.

You'll work with platform and engineering teams to improve guardrails, reduce recurring vulnerabilities, and embed security into the software delivery lifecycle.

The role requires hands-on remediation of findings from automated scanners, upgrades of risky dependencies, and governance artefacts to reduce risk.