App Security Engineer II — Remote & Secure-by-Default

Jobgether SRL; Canada; Remote; CAD 118,000 - 153,000; Full time

Benefits offered by this job

Fully remote within Canada

Competitive compensation

Job summary

Jobgether SRL, on behalf of a partner company, seeks an Application Security Engineer II based in Canada. The role focuses on embedding security into architectures, developer workflows, tooling, and infrastructure, combining hands‑on security engineering with threat modeling and risk assessment.

You’ll collaborate with engineering, product, platform and data teams to identify risks and deliver practical, risk‑informed solutions.

Qualifications

• 4+ years of professional experience in software engineering, application security, or closely related field.
• Practical experience with application security practices including threat modeling, secure design patterns, authentication and authorization, secrets management, and vulnerability remediation.
• Strong understanding of secure coding principles and common application security risks, including the OWASP Top 10.
• Ability to assess security risks, break down complex technical problems, evaluate tradeoffs, and recommend practical solutions.
• Experience collaborating directly with software engineers and product teams to integrate security into development and architecture processes.
• Strong sense of ownership, with the ability to independently manage assigned work, maintain momentum, and follow through to completion.
• Clear written and verbal communication skills, including the ability to explain security concepts and vulnerabilities to engineers with varying levels of security expertise.
• Sound technical judgment and ability to balance security requirements with product, engineering, and business priorities.
• Growth mindset with enthusiasm for learning from senior security professionals and expanding expertise across application and cloud infrastructure security.
• Ability to work effectively in a collaborative, remote environment and contribute constructively to cross‑functional initiatives.

Responsibilities

• Own and deliver application security initiatives within defined projects, products, or technical domains.
• Contribute to broader cross‑functional security programs by independently executing well‑defined components of larger initiatives.
• Identify, assess, prioritize, and help remediate application security vulnerabilities in partnership with engineering teams.
• Apply secure‑by‑default patterns, approved architectures, and reusable security practices when designing or reviewing systems.
• Partner with Product and Engineering teams to assess security risks and recommend practical improvements based on risk, business context, and technical feasibility.
• Participate in application security design reviews and threat modeling exercises for both new and existing systems.
• Write and review code, technical documentation, and security guidance to address vulnerabilities and prevent recurring classes of security issues.
• Help embed security controls into developer workflows, architectures, tooling, and infrastructure to reduce friction and cognitive load for engineering teams.
• Participate in security incident response activities and contribute to post‑incident analysis, lessons learned, and remediation efforts.
• Collaborate with more experienced security engineers and cross‑functional partners to continuously strengthen application and cloud security practices.
• Promote a security culture that enables engineering teams to move quickly while maintaining customer trust and reducing meaningful risk.

Job description

Jobgether SRL, on behalf of a partner company, seeks an Application Security Engineer II based in Canada. The role focuses on embedding security into architectures, developer workflows, tooling, and infrastructure, combining hands‑on security engineering with threat modeling and risk assessment.

You’ll collaborate with engineering, product, platform and data teams to identify risks and deliver practical, risk‑informed solutions.