Senior Application Security Engineer

Secure the applications powering next-generation AI infrastructure.

We're looking for a hands-on Senior Application Security Engineer to own the security of a large-scale cloud platform, public APIs, and AI-powered applications.

What You'll Do
Own application security across APIs, services, and customer-facing platforms.
Lead secure software delivery through SAST, DAST, SCA, secrets detection, and SBOMs.
Perform threat modelling, security reviews, and architecture assessments.
Define standards for authentication, authorisation, tenant isolation, and secrets management.
Secure AI assistants and agentic applications against risks such as prompt injection, tool misuse, and data leakage.
Work directly with engineering teams to automate security, reduce risk, and improve software quality.





What We're Looking For
7+ years in Application Security, Product Security, or Security-focused Software Engineering.
Strong knowledge of OWASP Top 10 and OWASP API Security Top 10.
Experience securing public cloud or multi-tenant platforms.
Hands-on experience with SAST, DAST, SCA, secrets management, and CI/CD security.
Solid coding skills in Python, Go, or TypeScript.
Experience with OAuth, OIDC, JWT, RBAC, ABAC, and contemporary authentication patterns.
Exposure to AI/LLM security is highly desirable.

Nice to Have
AI agent security experience.
SOC 2 or ISO 27001 settings.
CSSLP, OSWE, or similar security certifications.

📌 Senior Application Security Engineer Sydney (Australia)
🏢 Talenza
📍 Australia