Application Security Transformation Lead

Epsilon Solutions Ltd.; Toronto; Hybrid; CAD 120,000 - 180,000; Full time

Job summary

Epsilon Solutions Ltd. in Toronto is seeking a Snyk SME (Application Security Transformation Lead) to drive enterprise security tooling migration and transform our application security posture.

The role requires deep experience in Snyk, SAST/DAST/SCA platforms, and coordinating with regulated industries. The ideal candidate will bring over a decade in security, strong cross-functional leadership, and hands-on migration expertise from Veracode to Snyk in large enterprises.

Qualifications

• 10+ years of experience in Application Security, Cybersecurity, or DevSecOps.
• 5+ years of hands-on experience with enterprise SAST, SCA, and DAST platforms.
• 3+ years of implementation, administration, or engineering experience with Snyk.
• Demonstrated experience migrating application security tooling, preferably from Veracode to Snyk, in a large enterprise environment.
• Experience supporting regulated industries such as banking, financial services, insurance, healthcare, or government.
• Snyk product certifications or advanced Snyk platform training.
• CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials.
• Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.

Skills

Application Security experience

Cybersecurity experience

DevSecOps experience

Regulated industry experience

Education

Snyk product certifications or advanced Snyk platform training

Security certifications (CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent)

Tools

Snyk

Veracode migration knowledge

Job description

Snyk SME (Application Security Transformation Lead)

Full Time

Toronto, ON (Hybrid)

10+ years of experience in Application Security, Cybersecurity, or DevSecOps.

5+ years of hands-on experience with enterprise SAST, SCA, and DAST platforms.

3+ years of implementation, administration, or engineering experience with Snyk.

Demonstrated experience migrating application security tooling, preferably from Veracode to Snyk, in a large enterprise environment.

Experience supporting regulated industries such as banking, financial services, insurance, healthcare, or government. Snyk product certifications or advanced Snyk platform training.

CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials.

Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.Snyk product certifications or advanced Snyk platform training. CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials. Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.