Senior Application Security Engineer for AI Cloud

Firmus Technologies; Sydney; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

N/A

Job summary

Firmus Technologies is seeking a Senior Security Engineer, Application to own security across Firmus AI Cloud and related software. You will secure public APIs, tenant isolation, and the control plane that customers use to provision GPU compute.

You’ll automate defenses and drive secure design across teams. The role requires deep OWASP knowledge, cloud security experience, and strong communication in English.

Qualifications

• Bachelor's degree in computer science or a related technical field.
• 7+ years in application security, product security, or software engineering with a security focus.
• Experience securing a public cloud or multi-tenant platform with a public API.
• Deep, practical knowledge of OWASP Top 10 and OWASP API Security Top 10.
• Own CI/CD security gates in production and tune them to actionable findings.
• Writes production-quality code in Python, Go, or TypeScript.
• Hands-on with threat modelling, incident response, and SOC 2/ISO27001 controls.

Responsibilities

• Own the CI/CD security gates that every production repository passes through: SAST, DAST, SCA, secrets detection, SBOM generation.
• Lead threat modelling and secure design reviews; define attacker actions and required conditions.
• Govern tools and servers for AI agents and integrations; ensure proper access control and auditing.
• Coach security champions, provide incident support, and translate failures into gates and tooling.
• Provide engineering leadership with clear application risk and release readiness data.

Job description

Firmus Technologies is seeking a Senior Security Engineer, Application to own security across Firmus AI Cloud and related software. You will secure public APIs, tenant isolation, and the control plane that customers use to provision GPU compute.

You’ll automate defenses and drive secure design across teams. The role requires deep OWASP knowledge, cloud security experience, and strong communication in English.