Senior Manager of Product & Application Security

Talenza; Sydney; Hybrid; AUD 210,000 - 260,000; Full time

Job summary

Talenza in Sydney is seeking a Senior Manager of Product and Application Security to lead a small team of security engineers. The role is hybrid in Sydney and hands-on, ensuring secure software and cloud platforms, while guiding secure coding and threat modelling.

Responsibilities include embedding security into SDLC, performing vulnerability scans, securing AWS/Azure/GCP, building secure CI/CD tooling, API security, resilience and DR, and leading a security-driven engineering culture.

Qualifications

• Strong software security and application security engineering experience.
• Experience securing cloud platforms (AWS, Azure, GCP).
• Proven ability to lead a small technical security team.

Responsibilities

• Embed security into software development from the start.
• Conduct threat modelling and vulnerability scanning.
• Lead a team of security engineers.
• Secure the organisation's cloud environments (AWS/Azure/GCP).
• Build security into the CI/CD toolchain (code, container, IaC scans).
• Own API security and access controls.
• Improve resilience and disaster recovery capabilities; lead AI security initiatives.

Skills

Software security expertise

Cloud security

Team leadership

Tools

AWS

Azure

GCP

Job description

Senior Manager of Product & Application Security

Snr Manager of Product & Application Security
Sydney - Hybrid
$235,000 base + Super + Bonus

A major enterprise organisation is seeking an experienced Manager of Product and Application Security.

This role will lead a small team, but requires someone who is very technical and hands on.

Be the person who ensures the organisation builds secure software, runs secure cloud platforms, and can recover quickly when things go wrong, while leading a small team of security engineers.

Responsibilities:

• Embed security into software development from the beginning and help the developers use secure coding practices
• Conduct regular threat modelling activities and vulnerability scanning activities on software and applications
• Lead a team of 3 security engineers
• Secure the organisation's cloud environment (Mostly AWS, with some Azure and GCP)
• Build security into the engineering toolchain ie - automated code scanning, container scanning, IaC scanning, secure controls within CI/CD pipelines
• Own the API security by authenticating users and restricting access
• Improve overall resilience and disaster recovery capabilities
• Secure AI Initiatives as they are rolled out

Desired experience:

• Strong software security and application security engineering experience
• Experience securing cloud platforms/environments