Senior App Sec Engineer: Secure SDLC, Cloud & DevSecOps

Halliburton; Calgary; On-site; CAD 110,000 - 150,000; Full time

Benefits offered by this job

Health benefits

Work-life programs

Incentive plans

Job summary

Landmark, a Halliburton business line, is seeking an Application Security Engineer to identify and reduce security risk across its software products and cloud platforms used in the energy industry.

You'll perform security assessments, analyze findings, and work with engineering teams to remediate issues. The role spans secure software development, DevSecOps, cloud security, and software supply chain security, with a focus on practical guidance that helps teams build more secure software.

Qualifications

• Undergraduate degree in Computer Science or a related field.
• Minimum of three years of experience in software development, Application Security, Cybersecurity, DevSecOps, Cloud Security, or related field.
• Working knowledge of SDLC and secure development practices.
• Experience identifying, evaluating, or remediating security vulnerabilities in software.
• Understanding of common application attack vectors and security controls.
• Ability to communicate technical risks and remediation guidance clearly to engineering teams.

Responsibilities

• Perform application security assessments across web apps, APIs, cloud services, and enterprise software.
• Review results from SAST/DAST/CI tooling and validate findings for remediation.
• Identify attack paths, assess impact, and help prioritize remediation actions.
• Explain risks to software engineers and track vulnerabilities through resolution.
• Support CI/CD security and secure software development workflows.
• Contribute security requirements and guidance throughout the software development lifecycle.
• Review architectures for security weaknesses and potential misuse scenarios.
• Retest remediated vulnerabilities and document adequacy of fixes.
• Identify risks in open-source components and third-party dependencies in the supply chain.
• Document assessment results and security metrics for stakeholders.

Skills

Secure SDLC

Communication

Vulnerability assessment

Education

Undergraduate degree in Computer Science or related field

Tools

SAST

DAST

SCA

Vulnerability management platforms

Penetration-testing tools

GitLab CI/CD

Azure

AWS

Job description

Landmark, a Halliburton business line, is seeking an Application Security Engineer to identify and reduce security risk across its software products and cloud platforms used in the energy industry.

You'll perform security assessments, analyze findings, and work with engineering teams to remediate issues. The role spans secure software development, DevSecOps, cloud security, and software supply chain security, with a focus on practical guidance that helps teams build more secure software.