Developer

CoFoMo Inc.; Lévis; On-site; CAD 120,000 - 150,000; Full time

Job summary

CoFoMo Inc. is seeking a security-focused software professional to define and evolve security development standards while ensuring the security of internal frameworks.

You will identify vulnerabilities and promote secure-by-design practices across teams, acting as a trusted reference in application security and contributing to common patterns, guides, and tools. Collaborating with DevOps to embed security into CI/CD pipelines, you will implement detection and remediation tools, and stay ahead of

Qualifications

• Solid background in software development with Java, .NET, JavaScript, Python or equivalent technologies.
• Expertise in application security (AppSec).
• Master OWASP vulnerabilities and security development best practices.
• Experience with CI/CD pipelines and AppSec tools such as SAST, DAST, and SCA.
• Knowledge of Kubernetes, SonarQube, Wiz and WSL tools.
• Interest in security issues related to artificial intelligence.
• Ability to influence and collaborate in a matrix environment.
• Excellent communication and presentation/extension skills.

Responsibilities

• Define and evolve security development standards.
• Ensure the security of internal frameworks.
• Identify vulnerabilities and recommend appropriate fixes.
• Promote secure by design and shift left security.
• Act as a reference in application security for teams.
• Participate in the creation of common patterns, guides and tools.
• Collaborate with DevOps teams to integrate security into CI/CD pipelines.
• Implement tools to detect, monitor, and remediate vulnerabilities.

Skills

Java

.NET

JavaScript

Python

Tools

SAST

DAST

SCA

Kubernetes

SonarQube

Wiz

WSL

Job description

Here's a brief overview of the tasks and responsibilities you'll be able to:

• Define and evolve security development standards
• Ensure the security of internal frameworks
• Identify vulnerabilities and recommend appropriate fixes
• Promote secure by design and shift left security
• Act as a reference in application security for teams
• Participate in the creation of common patterns, guides and tools
• Collaborate with DevOps teams to integrate security into CI/CD pipelines
• Implement tools to detect, monitor, and remediate vulnerabilities

The profile you are looking for is as follows:

• Have a solid background in software development with Java, .NET, JavaScript, Python or equivalent technologies
• Have expertise in application security (AppSec)
• Master OWASP vulnerabilities and security development best practices
• Demonstrate experience with CI/CD pipelines and AppSec tools such as SAST, DAST, and SCA
• Know Kubernetes, SonarQube, Wiz and WSL tools
• Be interested in security issues related to artificial intelligence
• Demonstrate the ability to influence and collaborate in a matrix environment
• Excellent communication and extension skills
• Adopt a solution-oriented approach and continuous improvement.