Senior Application Security (AppSec) Consultant - Montreal

Abbeal; Montreal; Hybrid; CAD 96,000 - 165,000; Full time

Job summary

Abbeal is seeking a Senior Application Security (AppSec) Consultant for a Montreal freelance engagement. The 6-month hybrid assignment involves rolling out AppSec tooling (Snyk, Wiz, GitHub Advanced Security) and supporting development teams.

You will join a SOC team of about fifteen, reporting to the Offensive Security Operations Lead, with 2 days on site in Montreal. The role focuses on secure development practices and culture across product teams.

Qualifications

• 4+ years of related experience in application security or DevSecOps.
• Solid experience in enterprise software development.
• Good knowledge of application and cloud security.
• Comfortable with Docker, Maven, dotnet, npm, Poetry.
• Able to script to flag bad practices in code.
• Fluent French (deliverables in French), English a plus.

Responsibilities

• Contribute to the rollout of secure development tooling: Snyk, Wiz, GitHub Advanced Security
• Triage and prioritize application vulnerabilities
• Support development teams on application security best practices
• Help build a secure development culture across product teams

Skills

4+ years of experience in AppSec

Enterprise software development

Application security

Cloud security

Docker

Maven

dotnet

npm

Poetry

Scripting to flag bad practices

French language proficiency

Tools

Snyk

Wiz

GitHub Advanced Security

Job description

Senior Application Security (AppSec) Consultant - Montreal

Freelance mission, 6 months, major Canadian financial institution: rolling out application security tooling (Snyk, Wiz, GitHub) and supporting dev teams.

A major Canadian financial institution is strengthening its information security team. You join a SOC team of about fifteen people, reporting to the offensive security operations lead, for a 6-month engagement, hybrid, 2 days a week on site in Montreal.

Your missions

• Contribute to the rollout of secure development tooling: Snyk, Wiz, GitHub Advanced Security


• Triage and prioritize application vulnerabilities


• Support development teams on application security best practices


• Help build a secure development culture across product teams

Your profile

• Relevant technical background and 4+ years of related experience


• Solid experience in enterprise software development


• Good knowledge of application and cloud security


• Comfortable with Docker, Maven, dotnet, npm, Poetry


• Able to script to flag bad practices in code


• Fluent French (deliverables in French), English a plus