Senior Application Security Engineer

PEOPLE FORCE CONSULTING INC; Ontario; Hybrid; CAD 80,000 - 120,000; Full time

Job summary

An established industry player is seeking a Sr. Application Security Engineer to enhance their security processes and ensure compliance with critical standards. This exciting role involves developing and maintaining application security measures, conducting secure code reviews, and managing incident responses. The ideal candidate will have over 9 years of experience in security domains and a solid understanding of web application security. Join a dynamic team where your expertise will directly impact the organization's security posture and contribute to innovative IT solutions.

Qualifications

• 9+ years of experience in security domains with a focus on web applications.
• Solid understanding of compliance standards like PCI DSS and SOC2.

Responsibilities

• Develop and maintain application security processes ensuring compliance.
• Perform secure code reviews and manage security incidents effectively.

Skills

Application Security

Secure Code Review

Penetration Testing

Incident Response

Compliance (PCI DSS, SOC2)

Education

CISSP

CISLP

CISM

CISA

PMP

CIPP

TOGAF

CEH

Tools

Veracode

Tenable

Azure

Windows SQL

PostgreSQL

Job description

Sr. Application Security Engineer

Duration: 6 months with an option to convert to permanent with the end client after 6 months.

Location: Hybrid - 3 days in-office in Mississauga, Ontario, Canada.

Responsibilities:

1. Develop and maintain the application security process to its full potential, ensuring maturity.
2. Maintain compliance with Bill 198, SOC2, and PCI DSS controls.
3. Manage and improve security processes and technologies to identify, deter, investigate, and remediate security events.
4. Perform secure code reviews, SAST/DAST, and penetration testing.
5. Communicate security ideas effectively to engineering teams.
6. Handle cyber incident response and manage security controls.

Qualifications:

• 9+ years of experience in security domains.
• Solid understanding of web applications and security measures.
• Experience with Veracode, Tenable, Azure, Azure Data Lakes, Windows SQL, and PostgreSQL is desirable.
• Prior experience as an information security architect is a significant asset.
• Experience working in a PCI DSS and SOC 2 compliant environment is highly desired.

Certifications:

• CISSP (required)
• CISLP, CISM, CISA, PMP, CIPP, TOGAF, CEH (preferred)

Additional Details:

• Seniority level: Mid-Senior level
• Employment type: Contract
• Industry: IT Services and IT Consulting