Ingénieur principal, Sécurité des applications (Télétravail – région métropolitaine de Montréal[...]

Power Factors; Brossard; Remote; CAD 80,000 - 120,000; Full time

Job summary

A leading company in the renewable energy sector is seeking a Senior Engineer specializing in Application & Information Security. This role demands expertise in security protocols and hands-on experience with vulnerabilities, alongside the ability to guide teams in security practices. The position, which is fully remote for candidates in Greater Montreal, offers an opportunity to impact the security of essential energy applications.

Qualifications

• At least 5 years of experience in software development and/or application security.
• Expertise in authentication and authorization systems like PKI, OIDC, SAML, RBAC.
• Ability to work independently and collaboratively within AppSec and InfoSec teams.

Responsibilities

• Contribute thought leadership to the Information Security team and the company.
• Identify security weaknesses in Power Factors software products.
• Assist AppSec tools such as SCA, SAST, DAST.

Skills

Communication

Collaboration

Problem Solving

Education

Bachelor’s degree in computer science, cybersecurity, or related field

Tools

SCA

SAST

DAST

OIDC

SAML

Job description

Senior Engineer, Application & Information Security (Remote in Greater Montreal, Quebec or Ontario)

Join to apply for the Senior Engineer, Application & Information Security (Remote in Greater Montreal, Quebec or Ontario) role at Power Factors.

Power Factors is a software and solutions provider leading the next generation of clean energy with Unity, one of the most extensive and widely deployed renewable energy management suites (REMS) in the market. With over 300 GW of wind, solar, and energy storage assets managed worldwide across more than 600 customers and 18,000 sites, Power Factors manages 25% of the world’s renewable energy data.*

Power Factors’ Unity REMS supports the entire energy value chain, from monitoring and controls to market analytics. The company’s suite of open, data-driven applications empowers renewable energy stakeholders to collaborate, automate critical workflows, and make more informed decisions to maximize asset returns. Energy stakeholders receive end-to-end support, including solutions for SCADA & PPC, centralized monitoring, performance management, commercial asset management, and field service management.

With deep domain expertise, AI-powered insights are delivered at scale so businesses can optimize assets, unlock growth, and make smarter decisions as the world rapidly transitions to clean energy. Power Factors fights climate change with code.

*Outside China and India

About the Role

We are seeking a senior security professional to provide hands-on leadership to continue maturing the Information Security at Power Factors. As a leader in renewable energy applications, Power Factors develops a variety of SaaS applications and on-premises applications deployed into cloud and OT networks. Given the critical importance of energy generation, ensuring the security of Power Factors applications is vital. We’re looking for someone with a strong security architecture background who can provide thought leadership during design phases and threat modeling exercises. Additionally, we need someone with extensive development experience to work hands-on in fixing vulnerabilities such as XSS or SRRF and implementing security protocols like OIDC and SAML. The role also involves supporting the existing AppSec team with security tools, training, and processes.

Key Responsibilities:

• Contribute thought leadership as a senior security team member to the Information Security team and the company at large
• Identify novel attacks and security weaknesses in all Power Factors software products, including collaboration with third-party penetration testers
• Review application architectures for security weaknesses and help design secure architectures
• Work with development, cloud, and product teams to understand and remediate vulnerabilities based on severity and impact
• Assist with AppSec tools such as SCA, SAST, DAST
• Create and document policies and processes for application security
• Conduct internal security training and workshops for developers

Required Competencies:

• Bachelor’s degree in computer science, cybersecurity, information security, or related field
• At least 5 years of experience in software development and/or application security
• Expertise in authentication and authorization systems like PKI, OIDC, SAML, RBAC
• Experience with SCA, SAST, DAST tools
• Ability to work independently and collaboratively within AppSec and InfoSec teams
• Understanding of enterprise SaaS architecture and OT security
• Strong communication skills for explaining security principles across teams

_____________

Additional Details

• Seniority level: Not Applicable
• Employment type: Full-time
• Job function: Product Management and Information Technology
• Industries: Software Development and Services for Renewable Energy

Referrals increase your chances of interviewing at Power Factors by 2x.

Get notified about new Senior Application Security Engineer jobs in Brossard, Quebec, Canada.

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.