Application Security Engineering Specialist (DevSecOps)

TechAlliance of Southwestern Ontario, London Economic Development Corporation; Toronto; On-site; CAD 76,000 - 142,000; Full time

Job summary

Join a dynamic team as an Application Security Engineering Specialist, where you'll lead the integration of security measures into the development lifecycle. This innovative firm is committed to advancing DevSecOps practices, empowering developers to adopt a security-first mindset. Your role will involve automating security tools, collaborating with engineering teams, and researching new trends in application security. With a focus on creating a secure environment, you'll help drive real change and foster an inclusive culture that values diverse perspectives. If you have a passion for application security and want to make a significant impact, this opportunity is for you.

Qualifications

• 5-10 years of experience in application security.
• Proven experience integrating DAST and SAST into CI/CD pipelines.
• Strong knowledge of secure coding practices and security standards.

Responsibilities

• Automate security scan tools into CI/CD pipelines.
• Collaborate with teams to integrate security into workflows.
• Develop and maintain security documentation and policies.

Skills

Application Security

CI/CD Integration

Secure Coding Practices

Programming Languages (Java, Python, C#)

Cloud Security (AWS, Azure, GCP)

Threat Modeling

Problem-Solving Skills

Communication Skills

Education

CISSP Certification

CSSLP Certification

CEH Certification

OSCP Certification

Tools

SAST Tools

DAST Tools

AI and Machine Learning Applications

Job description

Application Security Engineering Specialist (DevSecOps)

Description:

Permanent Full Time

We are looking for an Application Security Engineering Specialist to join the Application Security Testing Services team, a dynamic team that helps advance DevSecOps practices by being strong partners of Developers across the organization. You will be responsible for ensuring the security of our applications by integrating security measures throughout the development lifecycle and work closely with our development and operations teams to implement and manage security tools and processes. This person will inspire developers to adopt a security-first mindset and be a helping hand in driving real change.

What you will do

1. Automate and integrate security scan and analysis tools (SAST, DAST, Container) into CI/CD pipelines
2. Utilize artificial intelligence and machine learning to enhance security analytics and threat detection
3. Review vulnerabilities with development teams to ensure proper prioritization along with establishing action plans
4. Perform threat modeling of application design to identify risks
5. Collaborate with engineering and product teams to integrate security into design and development workflows
6. Develop and maintain security documentation and policies
7. Research new trends in application security

What you will bring

• 5-10 years of experience in application security
• Proven experience integrating DAST and SAST into CI/CD pipelines
• Strong knowledge of secure coding practices and security standards
• Proficiency in one or more programming languages (Java, Python, C#)
• Strong understanding of system architecture, web technologies, APIs, and cloud platforms
• Experience with cloud security (AWS, Azure, GCP)
• Familiarity with DevSecOps practices, tools, and Agile Secure Software Development Lifecycle practices
• Experience with AI and machine learning applications in security is a plus
• Excellent problem-solving and verbal and written communication skills
• Certifications such as CISSP, CSSLP, CEH, or OSCP are assets

The base salary for this position is between $76,400.00 and $141,400.00 annually. This represents base salary only and does not include other variable compensation components (e.g., bonus, commission). If selected to proceed, your recruiter will discuss additional details of our total rewards program.

Career opportunities will be open for at least 5 business days from the posting date, with closing dates varying depending on search activity. All applications will be reviewed on a rolling basis.

Be your best at Canada Life—Apply today!

Canada Life values diverse backgrounds, perspectives, and talents, which shape our future success. We foster an inclusive, accessible environment where all employees and customers feel valued, respected, and supported. We are committed to building a workforce that reflects the communities we serve and providing equal opportunities for all.

If you require a reasonable accommodation during the application process, please contact [e-mail]. All information shared will be handled confidentially and in accordance with applicable laws.

Thank you for your interest. Only qualified applicants will be contacted for an interview.