Application Security Developer

Highspring; Montreal (administrative region); On-site; CAD 110,000 - 170,000; Full time

Job summary

Highspring is seeking a Senior Application Security Developer with a strong focus on Python to lead security-driven software development initiatives. This developer-first role emphasizes building and integrating security solutions across the SDLC, not just managing tools.

You will design Python-based security tooling, integrate AppSec platforms, and embed secure-by-design practices within CI/CD pipelines for enterprise environments.

Qualifications

• 5+ years of enterprise software development experience.
• Strong experience APIs, backend services, automation, and system integrations.
• Solid understanding of application security and secure software development practices.
• Experience integrating CI/CD pipelines (GitHub Actions, Jenkins, GitLab CI, Azure DevOps).
• Experience with cloud environments (AWS, Azure, GCP).
• Strong problem-solving skills and ability to design custom technical solutions.

Responsibilities

• Design, develop, and maintain Python-based security solutions, automation, and integrations.
• Build automation scripts and internal tooling to support secure software delivery.
• Develop APIs, connectors, and integrations between AppSec platforms and enterprise environments.
• Customize and extend existing security tooling to address enterprise needs.
• Integrate security capabilities into CI/CD pipelines and software delivery workflows.

Skills

Python development

APIs & backend services

Automation & integrations

CI/CD tooling

Cloud environments

Problem solving

Enterprise environment

Tools

GitHub Actions

Jenkins

GitLab CI

Azure DevOps

Snyk

Aqua Security

JFrog Xray

Job description

Senior Application Security Developer - Python

Position Overview

We are seeking a Senior Application Security Developer to join a strategic enterprise Application Security transformation initiative.

This is a highly technical, developer-first role requiring strong software development expertise in Python, combined with practical knowledge of application security, secure development practices, and vulnerability management.

The successful candidate will help build, integrate, customize, and automate security solutions across the software development lifecycle. This is not simply a security-tool administration role-we are looking for a strong developer who can solve security challenges through engineering.

Key Responsibilities

Application Security Development

• Design, develop, and maintain Python-based security solutions, automation, and integrations.
• Build automation scripts and internal tooling to support secure software delivery.
• Develop custom APIs, connectors, and integrations between AppSec platforms and enterprise environments.
• Customize and extend existing security tooling based on business and technical requirements.
• Develop solutions when out-of-the-box security tooling does not fully address enterprise needs.

Security Tooling & Platform Integration

• Support the implementation, configuration, integration, and optimization of AppSec platforms such as Snyk, Aqua Security, JFrog Xray, or similar technologies.
• Contribute to the evaluation and selection of the appropriate AppSec tooling strategy.
• Integrate security capabilities into CI/CD pipelines and software delivery workflows.
• Build proof-of-concepts and validate security tooling against technical and business requirements.

Secure Development Practices

• Collaborate with development teams to implement secure-by-design principles.
• Analyze application vulnerabilities and provide actionable remediation recommendations.
• Improve application security across modern cloud-native and enterprise applications.
• Contribute to secure code reviews, threat modeling, vulnerability triage, and remediation.
• Work closely with the AppSec Architect, DevSecOps Engineers, and Software Developers.
• Support knowledge transfer and capability building within the AppSec squad.
• Help bridge the gap between application security and software engineering.
• Collaborate with technical stakeholders to ensure security solutions are practical, scalable, and aligned with development workflows.

Required Qualifications

• 5+ years of enterprise software development experience.
• Strong experience building APIs, backend services, automation, and system integrations.
• Solid understanding of application security and secure software development practices.
• Experience integrating tools and automation into CI/CD pipelines such as GitHub Actions, Jenkins, GitLab CI, or Azure DevOps.
• Experience working with cloud environments such as AWS, Azure, or GCP.
• Strong problem-solving skills with the ability to design and build custom technical solutions.
• Ability to work effectively in a complex enterprise environment.

Nice-to-Have

• Hands-on experience with Snyk, Aqua Security, JFrog Xray, or comparable AppSec platforms.
• Experience with Software Composition Analysis (SCA).
• Experience with container security.
• Knowledge of SBOM management.
• Familiarity with secrets detection, dependency scanning, and vulnerability management.
• Knowledge of modern DevSecOps practices.
• Experience working within large, regulated enterprise environments.

Profile We're Looking For

We are looking for a strong developer first, with a security mindset.

The ideal candidate:

• Is highly proficient in Python development.
• Can build and adapt security solutions, rather than simply operate security tools.
• Understands how security fits into modern software engineering and CI/CD practices.
• Is comfortable working in an environment where the AppSec tooling strategy is still evolving.
• Can operate with ambiguity and contribute technically to defining the future-state solution.
• Brings a pragmatic engineering mindset focused on automation, scalability, and developer enablement.