Verafin – Senior Software Developer – Product Security

Verafin; San Juan de Terranova; Hybrid; CAD 80,000 - 110,000; Full time

Job summary

A leading company is seeking a Senior Software Developer specializing in product security. This role involves enhancing secure development practices and contributing to the Nasdaq Verafin application. The position offers opportunities for growth in cybersecurity and leadership roles. Candidates will work on application security features, manage vulnerabilities, and collaborate with teams to ensure high-quality deliverables. The role is hybrid, requiring in-office presence at least two days a week.

Benefits

Access to training and development programs

Opportunities for security certifications

Qualifications

• Strong analytical skills and creativity to solve complex problems.
• Knowledge of secure coding best practices for Java and web applications.

Responsibilities

• Collaborate with Threat and Vulnerability Management to remediate container vulnerabilities.
• Develop and maintain application security features.
• Conduct security code reviews.

Skills

Analytical Skills

Creativity

Tools

Java

Infrastructure as Code

Terraform

Job description

Exciting Opportunity: Senior Software Developer – Product Security

We're seeking a driven senior software developer to join our dynamic team specializing in product security. This role offers the chance to significantly enhance your expertise in secure development practices while working extensively with the Nasdaq Verafin application. You'll also have the opportunity to contribute to additional repositories and continually improve our security posture.

This position provides an excellent learning environment to deepen your knowledge and skills in application security, helping you become a valuable resource in protecting digital assets and data, and opening doors to advanced career opportunities and leadership roles in cybersecurity.

What You'll Do:

1. Collaborate with Threat and Vulnerability Management (TVM) to remediate container vulnerabilities.
2. Develop and maintain application security features.
3. Coordinate penetration tests with third-party vendors.
4. Address and remediate security findings.
5. Manage security-sensitive areas of the application such as Authentication and Authorization.
6. Conduct security code reviews.

What We're Looking For:

1. Strong analytical skills and creativity to solve complex problems.
2. Knowledge of secure coding best practices for Java and web applications.
3. Understanding of OWASP Top 10 is a plus.
4. Experience with Infrastructure as Code (IaC)/Terraform is a plus.

What Success Looks Like:

1. Applying a security mindset daily.
2. Being self-driven and taking ownership of projects.
3. Quickly ramping up on projects.
4. Working effectively with teams and stakeholders.
5. Delivering high-quality work and exceeding expectations.

Growth Opportunities:

1. Access to training and development programs.
2. Opportunities for security certifications.
3. Potential within the security pillar (e.g., Red Team).
4. Leadership roles as you grow within the team.
5. Technical leadership paths including Lead Developer and Architect.

This role closes on May 29th at 11:59pm NST.

The position can be located in St. John’s, NL, or Toronto, ON, with a hybrid work environment (at least 2 days a week in the office, subject to change), offering flexibility for qualified candidates.

Come as You Are

Nasdaq is an equal opportunity employer. We encourage applications from qualified candidates regardless of age, color, disability, national origin, race, religion, gender, sexual orientation, gender identity/expression, veteran status, or genetic information.

We provide reasonable accommodations for individuals with disabilities throughout the application and employment process. Please contact us to request an accommodation.