Application Security Engineer: SDLC Scanning & Remediation

WebHosting; Canada; Remote; CAD 90,000 - 120,000; Full time

Job summary

WebHosting in Canada is seeking an application security engineer to help scale our day-to-day AppSec program. You will operate scanning tools, triage findings, and work with engineering teams to get vulnerabilities fixed.

The role involves maintaining SAST, SCA, secrets and container scanning across the SDLC, tracking SLAs, onboarding new repos, and contributing to runbooks and automation.

Responsibilities

• Operate and maintain AppSec scanning tools (SAST, SCA, secrets scanning, container scanning) across the SDLC
• Triage findings, validate true positives, and prioritize remediation with engineering teams
• Track vulnerabilities through to closure and monitor SLA compliance
• Support onboarding of new repositories/services into the security tooling
• Contribute to internal documentation, runbooks, and process improvements
• Assist with basic scripting/automation tasks under guidance from senior team members

Job description

WebHosting in Canada is seeking an application security engineer to help scale our day-to-day AppSec program. You will operate scanning tools, triage findings, and work with engineering teams to get vulnerabilities fixed.

The role involves maintaining SAST, SCA, secrets and container scanning across the SDLC, tracking SLAs, onboarding new repos, and contributing to runbooks and automation.