Application Security Engineer

WebHosting; Canada; Remote; CAD 90,000 - 120,000; Full time

Job summary

WebHosting in Canada is seeking an application security engineer to help scale our day-to-day AppSec program. You will operate scanning tools, triage findings, and work with engineering teams to get vulnerabilities fixed.

The role involves maintaining SAST, SCA, secrets and container scanning across the SDLC, tracking SLAs, onboarding new repos, and contributing to runbooks and automation.

Responsibilities

• Operate and maintain AppSec scanning tools (SAST, SCA, secrets scanning, container scanning) across the SDLC
• Triage findings, validate true positives, and prioritize remediation with engineering teams
• Track vulnerabilities through to closure and monitor SLA compliance
• Support onboarding of new repositories/services into the security tooling
• Contribute to internal documentation, runbooks, and process improvements
• Assist with basic scripting/automation tasks under guidance from senior team members

Job description

Job Description

We’re looking for an application security engineer to help run and scale our day-to-day AppSec program. You will help us on our journey to operating our scanning tools, triaging findings, and working directly with engineering teams to get vulnerabilities fixed.

What you’ll do & how you’ll make your mark.

• Operate and maintain AppSec scanning tools (SAST, SCA, secrets scanning, container scanning) across the SDLC
• Triage findings, validate true positives, and prioritize remediation with engineering teams
• Track vulnerabilities through to closure and monitor SLA compliance
• Support onboarding of new repositories/services into the security tooling
• Contribute to internal documentation, runbooks, and process improvements
• Assist with basic scripting/automation tasks under guidance from senior team members