Senior Application Security Engineer - AI & Cloud APIs

Talenza; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

Talenza is seeking a Senior Application Security Engineer to own the security of a large-scale cloud platform, APIs, and AI-powered applications. You will work hands-on to secure across the stack and collaborate with engineering to automate security controls.

Key focus areas include threat modelling, authentication standards, SBOMs, and vulnerability management, with emphasis on robust security practices across CI/CD pipelines.

Qualifications

• 7+ years in application security roles.
• Strong knowledge of OWASP Top 10 and OWASP API Security Top 10.
• Experience securing public cloud or multi-tenant platforms.
• Hands-on experience with SAST, DAST, SCA, secrets management, and CI/CD security.
• Strong coding skills in Python, Go, or TypeScript.
• Experience with OAuth, OIDC, JWT, RBAC, ABAC patterns.
• Exposure to AI/LLM security is desirable.

Responsibilities

• Own application security across APIs, services, and customer-facing platforms.
• Lead secure software delivery through SAST, DAST, SCA, secrets detection, and SBOMs.
• Perform threat modelling, security reviews, and architecture assessments.
• Define standards for authentication, authorisation, tenant isolation, and secrets management.
• Secure AI assistants and agentic applications against risks like prompt injection and data leakage.
• Work with engineering teams to automate security and improve software quality.

Skills

Years experience

OWASP Top 10

OWASP API Security Top 10

Cloud security

SAST/DAST/SCA

CI/CD security

Secrets management

Programming: Python

Programming: Go

Programming: TypeScript

OAuth/OIDC/JWT

RBAC/ABAC

AI/LLM security

Job description

Talenza is seeking a Senior Application Security Engineer to own the security of a large-scale cloud platform, APIs, and AI-powered applications. You will work hands-on to secure across the stack and collaborate with engineering to automate security controls.

Key focus areas include threat modelling, authentication standards, SBOMs, and vulnerability management, with emphasis on robust security practices across CI/CD pipelines.