Senior Application Security Engineer

ZipRecruiter; Toronto; Hybrid; CAD 100,000 - 130,000; Full time

Job summary

A leading company is seeking an Application Security Engineering Specialist to enhance product security. This role involves collaborating with teams, implementing security practices, and conducting vulnerability assessments in a hybrid work environment. Ideal candidates will possess strong communication skills and relevant certifications.

Qualifications

• Experience with security best practices and frameworks like OWASP, NIST.
• Ability to write code for security policies and controls.

Responsibilities

• Build security into all products end-to-end.
• Collaborate with teams to adopt SSDLC best practices.
• Perform white box testing on applications.

Skills

Communication

Security Best Practices

Offensive Thinking

Education

Relevant Industry Certifications

Tools

GitLab

Jenkins

Job description

Job Description

Hiring an Application Security Engineering Specialist. Professionals suitable for the below opportunity may send their up-to-date resumes to [e-mail]

Requirement Summary

• Job Role/Title: Application Security Engineering Specialist
• Job Location: Toronto, Ontario, Canada.
• Job Duration: Initial contract of 6 months, with good possibilities of further extension.
• Work Style: Hybrid work setting - 3 days/week in the office required.

Position Overview and Deliverables: Seeking a Senior Application Security Engineering Specialist, who will be responsible for building security into all products end-to-end, and will be both hands-on technical and influential, and expected to directly communicate with cross-functional teams in Product, Development, and DevOps. Will also be responsible for analyzing the security of applications and services, discovering and addressing security issues, building automation, and decisively taking action to mitigate emerging threats throughout the Secure Software Development Lifecycle (SSDLC).

• Act as a subject matter expert for strategic initiatives, quarterly projects, and on-demand consultations.
• Collaborate with product and development teams to ensure the adoption of SSDLC best practices across the entire application lifecycle (SAST, SCA, DAST, WAF, ASPM, etc.).
• Write code to implement security policies and controls for well-known orchestration platforms (GitLab, Jenkins, etc.).
• Participate in vulnerability management operations, such as retesting and reprioritizing vulnerabilities, reviewing code changes, approving proposed remediations, etc.
• Perform white box testing on Canada Life’s portfolio of products.
• Contribute technical and procedural documentation towards the organization’s knowledge base.

Key Skillset for this Role

• Ability to think offensively like a hacker and defensively by evaluating applications and architecture.
• Excellent written communication skills, with a focus on translating technically complex issues into simple, easy-to-understand concepts.
• Read and write multiple programming like Java, C#, JavaScript, Apex, and Python are highly valued, but others will help too.
• Demonstrated knowledge of security best practices, principles, and common frameworks, such as OWASP, NIST, ISO, SOC, etc.
• Prior experience in implementing and integrating tools for static analysis, dynamic analysis, fuzzing, bug bounty, etc.
• Microservice architecture expertise and best practices in securing APIs across multi-cloud environments.
• Relevant industry certifications, such as OSCP, OSWE, GPEN, GWAPT, etc.

***

How to Apply: Please email me your up-to-date Resume/CV at [e-mail]

We appreciate all the applicants for their interest in working with us, however, only those candidates shortlisted for the next steps in the hiring process will be contacted.

Brainhunter is committed to providing an inclusive and accessible recruitment process. If you require accommodation at any point during the recruitment process, please reach out directly to the job poster or email [e-mail].

Thank you, and have a wonderful day!! :)