Senior Application Security Engineer

Placements24; Kimberley; Híbrido; CAD 120.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical insurance

Dental insurance

Vision insurance

Retirement plan

Certification support

Conference attendance

Remote work flexibility

Descripción de la vacante

Fintech Leader is seeking a Senior Application Security Engineer to join a fully remote, globally distributed team. You will lead security reviews, enforce secure coding practices, and drive vulnerability remediation across the software lifecycle.

You will collaborate with diverse engineering teams, implement SAST/DAST in CI/CD, and advance threat modeling, cloud security, and secure design principles in a fast-paced fintech environment.

Formación

• Bachelor's degree in CS/SE or related field.
• 6+ years in application security, software development, or related field.
• Proven secure coding, threat modeling, and vulnerability assessment experience.
• Strong knowledge of OWASP Top 10 and secure design principles.

Responsabilidades

• Lead security architecture reviews and threat modeling for new and existing apps.
• Develop and enforce secure coding standards and guidelines.
• Perform SAST and DAST testing.
• Integrate security tools into the CI/CD pipeline.
• Remediate identified vulnerabilities with development teams.
• Provide security training to engineers.
• Stay updated on latest security threats and mitigations.
• Assess third-party software components for security.
• Develop and maintain security automation scripts.

Conocimientos

Threat modeling

Security architecture

Secure coding

SAST/DAST

CI/CD security

Vulnerability remediation

Cloud security

Programming (Java/Python/C#/JavaScript

Security training

Automation scripting

Educación

Bachelor's degree in CS/SE or related field

Herramientas

SAST tools

DAST tools

CI/CD tooling

Cloud security tooling

Descripción del empleo

About the Role

Our client, a leading innovator in the fintech sector, is seeking a highly experienced Senior Application Security Engineer to join their distributed, remote team. This role is paramount in ensuring the security of our client's software applications throughout their entire lifecycle, from design and development to deployment and maintenance. You will collaborate closely with development teams to embed security best practices, conduct security reviews, and identify and mitigate vulnerabilities in our codebases. This is a fully remote position, offering the flexibility to work from anywhere while contributing to the security of critical financial platforms. Your expertise will be key in protecting sensitive user data and maintaining the trust of our global customer base.

Key Responsibilities

• Lead security architecture reviews and threat modeling for new and existing applications.


• Develop and enforce secure coding standards and guidelines.


• Perform static (SAST) and dynamic (DAST) application security testing.


• Integrate security testing tools into the CI/CD pipeline.


• Work with development teams to remediate identified application vulnerabilities.


• Provide security training and guidance to software engineers.


• Stay abreast of the latest application security threats, vulnerabilities, and mitigation techniques.


• Conduct security assessments of third-party software components.


• Develop and maintain security automation scripts and tools.


• Advise on secure design principles and best practices for application development.

Requirements

• Bachelor's degree in Computer Science, Software Engineering, or a related field.


• Minimum of 6 years of experience in application security, software development, or a related field.


• Proven expertise in secure coding practices, threat modeling, and vulnerability assessment.


• Strong knowledge of common web application vulnerabilities (e.g., OWASP Top 10).


• Experience with SAST and DAST tools.


• Proficiency in one or more programming languages (e.g., Java, Python, C#, JavaScript).


• Experience with cloud security principles (AWS, Azure, GCP).


• Excellent communication, collaboration, and problem-solving skills.


• Ability to work independently and effectively in a remote team environment.


• Relevant security certifications (e.g., CSSLP, GIAC-GWEB) are a strong plus.

Benefits

Our client offers a highly competitive salary, comprehensive benefits package including medical, dental, and vision insurance, and a generous retirement plan. This fully remote role provides exceptional flexibility and work-life balance. You will have access to cutting-edge security tools and continuous learning opportunities, including conference attendance and certification support. We foster a culture of innovation and collaboration within our globally distributed team.