Senior Application Security Engineer

We're looking for a hands-on Senior Application Security Engineer to own the security of a large-scale cloud platform, public APIs, and AI-powered applications.
Own application security across APIs, services, and customer-facing platforms.
Lead secure software delivery through SAST, DAST, SCA, secrets detection, and SBOMs.
Perform threat modelling, security reviews, and architecture assessments.
Define standards for authentication, authorisation, tenant isolation, and secrets management.
Secure AI assistants and agentic applications against risks such as prompt injection, tool misuse, and data leakage.
Work directly with engineering teams to automate security, reduce risk, and improve software quality.
7+ years in Application Security, Product Security,



or Security-focused Software Engineering.
Robust knowledge of OWASP Top 10 and OWASP API Security Top 10.
Experience securing public cloud or multi-tenant platforms.
Hands-on experience with SAST, DAST, SCA, secrets management, and CI/CD security.
Robust coding skills in Python, Go, or TypeScript.
Experience with OAuth, OIDC, JWT, RBAC, ABAC, and up-to-date authentication patterns.
Exposure to AI/LLM security is highly desirable.
AI agent security experience.
SOC 2 or ISO 27001 environments.
CSSLP, OSWE, or similar security certifications.

📌 Senior Application Security Engineer Sydney
🏢 Talenza
📍 Sydney