Senior Application Security Engineer

Talenza; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

Talenza is seeking a Senior Application Security Engineer to own the security of a large-scale cloud platform, APIs, and AI-powered applications. You will work hands-on to secure across the stack and collaborate with engineering to automate security controls.

Key focus areas include threat modelling, authentication standards, SBOMs, and vulnerability management, with emphasis on robust security practices across CI/CD pipelines.

Qualifications

• 7+ years in application security roles.
• Strong knowledge of OWASP Top 10 and OWASP API Security Top 10.
• Experience securing public cloud or multi-tenant platforms.
• Hands-on experience with SAST, DAST, SCA, secrets management, and CI/CD security.
• Strong coding skills in Python, Go, or TypeScript.
• Experience with OAuth, OIDC, JWT, RBAC, ABAC patterns.
• Exposure to AI/LLM security is desirable.

Responsibilities

• Own application security across APIs, services, and customer-facing platforms.
• Lead secure software delivery through SAST, DAST, SCA, secrets detection, and SBOMs.
• Perform threat modelling, security reviews, and architecture assessments.
• Define standards for authentication, authorisation, tenant isolation, and secrets management.
• Secure AI assistants and agentic applications against risks like prompt injection and data leakage.
• Work with engineering teams to automate security and improve software quality.

Skills

Years experience

OWASP Top 10

OWASP API Security Top 10

Cloud security

SAST/DAST/SCA

CI/CD security

Secrets management

Programming: Python

Programming: Go

Programming: TypeScript

OAuth/OIDC/JWT

RBAC/ABAC

AI/LLM security

Job description

Senior Application Security Engineer

Secure the applications powering next-generation AI infrastructure.

We're looking for a hands‑on Senior Application Security Engineer to own the security of a large-scale cloud platform, public APIs, and AI‑powered applications.

What You’ll Do

• Own application security across APIs, services, and customer-facing platforms.
• Lead secure software delivery through SAST, DAST, SCA, secrets detection, and SBOMs.
• Perform threat modelling, security reviews, and architecture assessments.
• Define standards for authentication, authorisation, tenant isolation, and secrets management.
• Secure AI assistants and agentic applications against risks such as prompt injection, tool misuse, and data leakage.
• Work directly with engineering teams to automate security, reduce risk, and improve software quality.

What We're Looking For

• 7+ years in Application Security, Product Security, or Security-focused Software Engineering.
• Strong knowledge of OWASP Top 10 and OWASP API Security Top 10.
• Experience securing public cloud or multi-tenant platforms.
• Hands‑on experience with SAST, DAST, SCA, secrets management, and CI/CD security.
• Strong coding skills in Python, Go, or TypeScript.
• Experience with OAuth, OIDC, JWT, RBAC, ABAC, and modern authentication patterns.
• Exposure to AI/LLM security is highly desirable.

Nice to Have

• AI agent security experience.
• SOC 2 or ISO 27001 environments.
• CSSLP, OSWE, or similar security certifications.