Senior Application Security Engineer We're looking for a hands-on Senior Application Security Engineer to own the security of a large-scale cloud platform, public APIs, and AI-powered applications.
Own application security across APIs, services, and customer-facing platforms.
Lead secure software delivery through SAST, DAST, SCA, secrets detection, and SBOMs.
Perform threat modelling, security reviews, and architecture assessments.
Define standards for authentication, authorisation, tenant isolation, and secrets management.
Secure AI assistants and agentic applications against risks such as prompt injection, tool misuse, and data leakage.
Work directly with engineering teams to automate security, reduce risk, and improve software quality.
7+ years in Application Security, Product Security,



or Security-focused Software Engineering.
Strong knowledge of OWASP Top 10 and OWASP API Security Top 10.
Experience securing public cloud or multi-tenant platforms.
Hands-on experience with SAST, DAST, SCA, secrets management, and CI/CD security.
Strong coding skills in Python, Go, or TypeScript.
Experience with OAuth, OIDC, JWT, RBAC, ABAC, and up-to-date authentication patterns.
Exposure to AI/LLM security is highly desirable.
AI agent security experience.
SOC 2 or ISO ***** environments.
CSSLP, OSWE, or similar security certifications.

📌 Senior Application Security Engineer (New South Wales)
🏢 Talenza
📍 New South Wales