Co-op/ Intern Application Security Analyst

Kinaxis Inc.; Ottawa; Hybrid; CAD 53,000 - 77,000; Full time

Benefits offered by this job

Flexible vacation and Kinaxis Days

Flexible work options

Well-being programs

Hackathons

Mentorship programs, training, andcar

Job summary

Kinaxis in Ottawa, Canada, is seeking an Intern in Product Security to partner with Corporate IT, Cloud Services, and Development teams to implement security controls. This role combines software development and cybersecurity passions, offering exposure to threat modeling, static/dynamic analysis, vulnerability management, and DevSecOps practices.

The position provides hands-on experience across the full software development lifecycle, with opportunities to contribute to security tooling and

Qualifications

• Completion of the 2nd year of a Computer Sciences / Computer Engineering program, Cybersecurity or related field.
• Basic knowledge of technical skills relevant to Application Security such as secure coding, application security testing, ethical hacking techniques, vulnerability and threat management.
• Hands‑on experience with vulnerability management and penetration testing tools (e.g. NMAP, Burp Suite, OWASP ZAP, Nexpose, SonarQube, Metasploit, etc.).
• Familiarity with one or more programming languages such as JavaScript, PowerShell, Python, Java, C#, etc.
• Familiarity with the OWASP Top 10.
• Excellent communication and collaboration skills.

Responsibilities

• Identify security risks at the application level, at each stage of development, and proactively work to ensure that risks are assessed and mitigated across the business.
• Integrate static and / or dynamic code analysis tools into the SDLC.
• Arrange or conduct vulnerability and penetration tests against defined systems.
• Monitor application security trends and evolving technologies and keep senior management informed about related application security issues and implications for Kinaxis.
• Assist in performing risk assessments, threat modeling and other product security related reviews.
• Review and triage of SAST and SCA reports, working with developers to prioritize and remediate findings.
• Help maintain and fix issues in CI / CD pipelines.
• Implement enhancements to our in-house custom built security tools.

Skills

Security awareness

Communication

Team collaboration

Problem solving

Adaptability

Education

2nd year CS/Engineering program

Cybersecurity or related field

Tools

NMAP

Burp Suite

OWASP ZAP

Nexpose

SonarQube

Metasploit

JavaScript

PowerShell

Python

Java

C#

Docker

Kubernetes

Jenkins

Job description

About Kinaxis

Are you looking to join an innovative, market-leading company where you can truly elevate your career? At Kinaxis we are serious about culture, we are serious about technology, we are serious about customers, and we are serious about not taking ourselves too seriously. If you are looking to be part of an incredible growth story, then we might just be the place for you!

In 1984, we started out as a team of three engineers. Today, we have grown to become a global organization with over 2000 employees around the world, 6 global office and a best-in-class HQ in Ottawa, Canada. As winners of several Top Employer awards globally, we are proud to work with our customers and employees towards solving some of the biggest challenges facing supply chains today.

Kinaxis is a global leader in modern supply chain orchestration, powering complex global supply chains, and supporting the people who manage them. Our powerful, AI infused platform provides full transparency and visibility across end-to-end supply chains, enabling our customers to make faster, better decisions. We are trusted by renowned global brands to provide the agility and predictability needed to navigate today’s volatility and disruption. With more than 40,000 users in over 100 countries, we are expanding our team as we continue to innovate and revolutionize how we support our customers.

About the team

The Product Security team is responsible for the Security Development Lifecycle at Kinaxis. Identifying and remediating security related flaws across Kinaxis’ software applications, “red teaming” new features, threat modeling, security assessments and enhancing our overall security posture are core to our team responsibilities.

Location

This is a hybrid position. You must be in the Ottawa, Canada office, at least three days a week

Term Duration

This is a full-time, 8 month position, starting Jan 2027

Compensation range

$25.24 - $37.02 hourly rate. The final offer within this range will reflect the candidate’s skills, year of education, and experience.

Co-op or Intern

This position is open to co-ops and interns as soon as you can work full‑time with no interruption for 8 months starting January 2027. To be eligible for a Co‑op or Intern position at Kinaxis, you must either be currently enrolled in full‑time education or, if you are a recent/upcoming graduate, your graduation date must be within 12 months of the placement end date

Vacancy Status

This is an existing job vacancy.

About the role

As an Intern in Product Security, you will partner closely with stakeholders across the business, including Corporate IT, Cloud Services, Product Development and technology partners to contribute to the implementation of security solutions and controls.

This role is ideal for someone passionate about both software development and cybersecurity – someone who enjoys digging into code, understanding how systems work, identifying their flaws and offering recommendations on remediation.

You will have exposure to the full software development lifecycle and develop skills in areas such as threat modeling, static / dynamic analysis, vulnerability management, offensive security and more.

What you will do

• Identify security risks at the application level, at each stage of development, and proactively work to ensure that risks are assessed and mitigated across the business
• Integrate static and / or dynamic code analysis tools into the SDLC
• Arrange or conduct vulnerability and penetration tests against defined systems
• Monitor application security trends and evolving technologies and keep senior management informed about related application security issues and implications for Kinaxis
• Assist in performing risk assessments, threat modeling and other product security related reviews
• Review and triage of SAST and SCA reports, working with developers to prioritize and remediate findings
• Help maintain and fix issues in CI / CD pipelines
• Implement enhancements to our in-house custom built security tools.

What we are looking for

• Completion of the 2nd year of a Computer Sciences / Computer Engineering program, Cybersecurity or related field
• Basic knowledge of technical skills relevant to Application Security such as secure coding, application security testing, ethical hacking techniques, vulnerability and threat management
• Hands‑on experience with vulnerability management and penetration testing tools (e.g. NMAP, Burp Suite, OWASP ZAP, Nexpose, SonarQube, Metasploit, etc.)
• Familiarity with one or more programming languages such as JavaScript, PowerShell, Python, Java, C#, etc.
• Familiarity with the OWASP Top 10
• Highly adaptable and able to pivot based on prioritization and needs of the business; proactively solicits feedback to ensure alignment
• Excellent communication and collaboration skills

Things that would definitely help

• Experience with Docker and / or Kubernetes, Jenkins
• Participation in CTFs, security clubs or open‑source contributions
• Understanding of CI / CD pipelines and DevSecOps practices

Work With Impact:

Our platform directly helps companies power the world’s supply chains. We see the results of what we do out in the world every day, when we see store shelves stocked, when medications are available for our loved ones, and so much more.

Work with Fortune 500 Brands:

Companies across industries trust us to help them take control of their integrated business planning and digital supply chain. Some of our customers include Lockheed Martin, Unilever, P&G, ExxonMobil, Cisco and more.

Social Responsibility at Kinaxis:

Our Diversity, Equity, and Inclusion Committee weighs in on hiring practices, talent assessment training materials, and mandatory training on unconscious bias and inclusion fundamentals. Sustainability is key to what we do and we’re committed to a long‑term net‑zero operations strategy. We are involved in our communities and support causes where we can make the most impact.

People matter at Kinaxis and here are some of the perks and benefits we offer, which may vary by location and employee:

• Flexible vacation and Kinaxis Days (company‑wide days off)
• Flexible work options
• Physical and mental well‑being programs
• Regularly scheduled virtual fitness classes
• Mentorship programs, training, and career development
• Recognition programs and referral rewards
• Hackathons

For more information, visit the Kinaxis website at www.kinaxis.com or the company’s blog at http://blog.kinaxis.com.

Kinaxis is committed to ensuring a fair and transparent recruitment process. We use artificial intelligence (AI) tools in the initial step of the recruitment process to compare submitted resumes against the job description to identify candidates whose education, experience, and skills most closely match the requirements of the role. After the initial screening, all subsequent decisions regarding your application, including final selection, are made by our human recruitment team. AI does not make any final hiring decisions.