Hybrid Application Security Analyst – SDLC & Cloud

Randstad Digital; Toronto; Hybrid; CAD 95,000 - 100,000; Full time

Job summary

Randstad Digital in Canada is seeking an Information Security Analyst to protect corporate assets by overseeing security policies and SDLC security. You will contribute to risk mitigation across shared services and support vulnerability assessments, third-party SaaS reviews, and disaster recovery activities.

You will ensure secure coding, perform vulnerability scans, review application controls, and participate in external security reviews of vendors.

Qualifications

• 2–3 years of experience in information security, financial services preferred.
• Bachelor’s degree in Information Technology, Computer Science, or a related discipline (or equivalent practical experience).
• Knowledge of vulnerability assessments, secure code and infrastructure reviews, secure access modeling, threat modeling, and digital security architecture.
• Solid understanding of cloud security (AWS, Azure) and audit standards like PCI-DSS, SSAE-16, FFIEC.
• Exceptional interpersonal, collaboration, written, presentation, and multi-tasking skills for cross-functional stakeholders.

Responsibilities

• Ensure the SDLC complies with information security policies for secure coding and access controls.
• Perform vulnerability analysis and issues management for pre-production and production applications using standard tools.
• Review proposed changes to application controls including data encryption, user security profiles, and input/output integrity checks.
• Conduct External Security Reviews on third-party vendors and SaaS providers accessing confidential data or performing critical functions.
• Assess cloud vendors and SaaS platforms from an information security requirements perspective.
• Monitor Data Loss Prevention tools, conduct security investigations, and assist with Security Training & Awareness initiatives.
• Support Disaster Recovery operations, including DR tests and DR team assistance.

Skills

Vulnerability assessments

Secure code reviews

Threat modeling

Information security governance

Data loss prevention

Disaster recovery coordination

Education

Bachelor’s degree in IT/CS or related field

Tools

Fortify

Veracode

Checkmarx

AppScan

ServiceNow

Job description

Randstad Digital in Canada is seeking an Information Security Analyst to protect corporate assets by overseeing security policies and SDLC security. You will contribute to risk mitigation across shared services and support vulnerability assessments, third-party SaaS reviews, and disaster recovery activities.

You will ensure secure coding, perform vulnerability scans, review application controls, and participate in external security reviews of vendors.