Lead Application Security Engineer

Elastify; Toronto; Hybrid; CAD 100,000 - 150,000; Full time

Job summary

Elastify is seeking a Lead/Manager of Application Security for a hybrid role in downtown Toronto. This position requires extensive experience in software development and cybersecurity, focusing on application security and vulnerability remediation. The ideal candidate will have hands-on expertise in secure coding practices and familiarity with security testing tools.

Qualifications

• 10+ years of experience in software development and cybersecurity engineering.
• Proficiency in scripting languages (Python, PowerShell) and familiarity with programming languages (Java, C#, C++, SQL).
• Extensive hands-on experience with application security testing tools.

Responsibilities

• Lead application security initiatives and vulnerability remediation.
• Implement secure coding practices and threat detection methodologies.
• Oversee application security testing and automation.

Skills

Application vulnerability remediation

Container security

Secure coding practices

Insider threat detection

Scripting languages

Application security testing tools

Security automation tools

Secure software development lifecycle practices

Threat modeling methodologies

Job description

Be among the first 25 applicants

Elastify is looking for a Lead/Manager of Application Security who remains hands-on for a permanent role in downtown Toronto. The role is hybrid. Please apply for more details.

Must-have:

• 10+ years of experience in software development and cybersecurity engineering roles, with significant hands-on expertise in application vulnerability remediation, container security, secure coding practices, and insider threat detection.
• Proficiency in scripting languages (e.g., Python, PowerShell) and familiarity with multiple programming languages (e.g., Java, C#, C++, SQL) for software development and vulnerability remediation.
• Extensive hands-on experience with application security testing tools (SAST, DAST, IAST, SCA) and direct remediation activities.
• Technical expertise with container security (Docker, Kubernetes), infrastructure-as-code (IaC) security (e.g., Terraform), vulnerability remediation, insider threat detection, and security automation tools.
• Strong architectural knowledge, comprehensive understanding of secure software development lifecycle (SSDLC) practices, and familiarity with OWASP Top 10, SANS 25, and threat modeling methodologies.

Nice-to-have:

• Relevant security certifications (CSSLP, GWAPT, OSCP, CISSP, or equivalent).
• Experience in financial services or highly regulated industries.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Information Technology

Industries

• IT Services and IT Consulting

Referrals increase your chances of interviewing at Elastify by 2x.

Get notified about new Application Security Engineer jobs in Toronto, Ontario, Canada.