Application Security Engineer

Compunnel Inc.; Montreal; On-site; CAD 110,000 - 150,000; Full time

Job summary

Compunnel, Inc. is seeking an experienced Application Security Engineer in Montreal to strengthen security in internal .NET repositories. You will review, harden, and improve code, build PowerShell automation, and collaborate with agile teams to embed secure coding practices across the SDLC.

The role requires 8+ years of software development experience, strong .NET (C#, ASP.NET) skills, and hands-on security expertise, with familiarity in OWASP and secure CI/CD.

Qualifications

• 8+ years of software development experience.
• Experience writing PowerShell scripts.
• Strong hands-on expertise with the .NET Framework (C#, ASP.NET).
• Demonstrable application security experience.
• Experience with secure coding, code review, and remediation.
• Familiarity with recognized application security standards (e.g., OWASP).
• Hands-on experience with Continuous Integration/Continuous Delivery.
• Hands-on experience with Agile development (Scrum, Kanban).
• Understanding of SDLC and secure CI/CD processes.
• Hands-on experience with Jira or other issue-tracking systems.

Responsibilities

• Review, harden, and improve code across internal .NET Framework applications and services.
• Build and run PowerShell automation to analyze, improve, and harden code across internal repositories.
• Partner with development squads to embed secure coding practices throughout the software development lifecycle.
• Strengthen existing application features and remediate findings raised through code review and security tooling.
• Enhance the team’s use of automated security testing within Continuous Integration/Continuous Delivery pipelines.
• Perform code reviews and contribute to secure-by-design standards, patterns, and guidance.
• Support and improve the team’s adoption of agile principles, participating in sprint retrospectives and demos as needed.

Skills

PowerShell scripting

.NET Framework (C#, ASP.NET)

Application security

Secure coding

CI/CD

Agile development

SDLC

Jira

Tools

Jira

Job description

JOB SUMMARY

We are looking for an experienced Application Security Engineer with strong .NET Framework expertise to join our Productivity and Collaboration team. This role will focus on strengthening the security, quality, and resilience of applications and services. The successful candidate will be responsible for reviewing, hardening, and improving code within internal .NET repositories to meet high secure engineering standards. You will be involved in all phases of the software development lifecycle and collaborate with other team members to deliver value to stakeholders.

Key Responsibilities

• Review, harden, and improve code across internal .NET Framework applications and services.
• Build and run automation in PowerShell to analyze, improve, and harden code across internal repositories.
• Partner with development squads to embed secure coding practices throughout the software development lifecycle.
• Strengthen existing application features and remediate findings raised through code review and security tooling.
• Enhance the team’s use of automated security testing within Continuous Integration/Continuous Delivery pipelines.
• Perform code reviews and contribute to secure-by-design standards, patterns, and guidance.
• Support and improve the team’s adoption of agile principles, participating in sprint retrospectives and demos as needed.

Required Qualifications

• 8+ years or more of software development experience.
• Experience writing PowerShell scripts.
• Strong hands‑on expertise with the .NET Framework (C#, ASP.NET).
• Demonstrable application security experience.
• Experience with secure coding, code review, and remediation.
• Familiarity with recognized application security standards (e.g., OWASP).
• Hands‑on experience with Continuous Integration/Continuous Delivery.
• Hands‑on experience with Agile development (Scrum, Kanban).
• Understanding of SDLC and secure CI/CD processes.
• Hands‑on experience with Jira or other issue‑tracking systems.

Preferred Qualifications

• .NET Core experience.
• Experience with Static and dynamic application security testing (SAST/DAST) tools.
• Threat modeling experience.
• SQL and Database Design experience.