Senior Application Security Engineer
Posted Updated 1
view
Summary
Hands-on senior application security role in Sydney owning security for a large-scale cloud platform, public APIs, and AI-powered applications. Day to day: threat modelling, secure SDLC automation (SAST, DAST, SCA, SBOMs), auth/tenant-isolation standards, and securing AI/LLM agents against prompt injection, coding in Python, Go, or TypeScript.
Salary: $200k - $250k p.a. + Bonus and Super
Senior Application Security Engineer
Secure the applications powering next-generation AI infrastructure.
We're looking for a hands-on Senior Application Security Engineer to own the security of a large-scale cloud platform, public APIs, and AI-powered applications.
What You'll Do
- Own application security across APIs, services, and customer-facing platforms.
- Lead secure software delivery through SAST, DAST, SCA, secrets detection, and SBOMs.
- Perform threat modelling, security reviews, and architecture assessments.
- Define standards for authentication, authorisation, tenant isolation, and secrets management.
- Secure AI assistants and agentic applications against risks such as prompt injection, tool misuse, and data leakage.
- Work directly with engineering teams to automate security, reduce risk, and improve software quality.
What We're Looking For
- 7+ years in Application Security, Product Security, or Security-focused Software Engineering.
- Strong knowledge of OWASP Top 10 and OWASP API Security Top 10.
- Experience securing public cloud or multi-tenant platforms.
- Hands-on experience with SAST, DAST, SCA, secrets management, and CI/CD security.
- Strong coding skills in Python, Go, or TypeScript.
- Experience with OAuth, OIDC, JWT, RBAC, ABAC, and modern authentication patterns.
- Exposure to AI/LLM security is highly desirable.
Nice to Have
- AI agent security experience.
- SOC 2 or ISO 27001 environments.
- CSSLP, OSWE, or similar security certifications.
