Principal Application Security Architect

OpenText; Southwestern Ontario; On-site; CAD 140,000 - 190,000; Full time

Job summary

OpenText is seeking a Principal Application Security Architect to lead security across software development. Based in Richmond Hill, ON, you will shape secure development practices, mentor teams, and ensure products meet global security requirements.

You will drive vulnerability discovery, remediation, and security tooling integration in CI/CD, partnering with engineers, architects, and DevOps to raise the bar on information security.

Qualifications

• 10+ years of web application security and vulnerability analysis.
• Strong communication skills, verbal and written.
• Experience promoting security culture across teams.
• Familiarity with agile software development lifecycle.

Responsibilities

• Continually improve the Secure Software Development Lifecycle.
• Evangelize security to 4000+ software engineers globally.
• Support vulnerability discovery and remediation early in the SDLC.
• Ensure OpenText software meets global security requirements.

Skills

Web application security

Vulnerability analysis

Security evangelism

Agile SDLC

Communication skills

Education

Degree in computer science / computer engineering / information security

CISSP and/or CEH certified

Tools

Vulnerability scanning tools

Job description

At OpenText, AI is at the heart of everything we do—powering innovation, transforming work, and empowering digital knowledge workers. We are hiring talent AI can't replace to help us shape the future of information management. Join us.

Job: Principal Application Security Architect

Location: Richmond Hill, ON, Canada (office-based)

The opportunity

The successful candidate will work as part of a small team of subject-matter experts, providing security expertise to software development teams producing world class enterprise information management applications. In a time of increasing interconnectivity and rising expectations of rapid content delivery, security is a paramount concern.

Your Impact

In this role you will focus on continually improving the Secure Software Development Lifecycle and evangelizing the importance of security to more than 4000 software engineers globally. You will also support a team responsible for locating security vulnerabilities and preventing them as early as possible in the development process. You will be expected to demonstrate their technical knowledge and help OpenText produce software that exceeds the security requirements of customers worldwide.

What the role offers

• Application vulnerability types, exploit techniques, and mitigation approaches
• Sophisticated hacking techniques and tooling
• Advanced level software vulnerability scanning tools and detection methods including frontier AI scanning
• Integrating security checks into a CI-CD pipeline for cloud applications
• Design and mentoring on the creation and use of threat models
• Hands-on experience with COTS and open-source application security testing tools
• Securing and hardening virtualized and containerized deployment environments.
• Securing and hardening supply chains
• Software security standards, compliance processes, and common application security controls

What you need to succeed

• 10+ years of web application security and vulnerability analysis
• Skilled at research and driven to be current and informed on cybersecurity trends
• Persuasive, clear, concise communicator, both verbally and written
• Highly organized with an ability to meet deadlines
• Self-motivated with a drive to succeed for yourself, your team and your company
• Excellent people skills with ability to network with product development teams, software architects, and dev/ops both in-person and remotely, instilling security into the development culture
• Background/understanding of agile software development life cycle
• Strong analytical / troubleshooting skills
• Commitment to quality and a thorough approach to work.
• Excellent writing and presentation skills
• A natural curiosity and detective skills

Education

• Degree or commensurate experience in computer science, computer engineering, or information security related disciplines
• CISSP and/or CEH certified

One last thing

OpenText is more than just a corporation, it's a global community where trust is foundational, the bar is raised, and outcomes are owned.

Join us on our mission to drive positive change through privacy, technology, and collaboration. At OpenText, we don't just have a culture; we have character. Choose us because you want to be part of a company that embraces innovation and empowers its employees to make a difference.