Senior Application Security Engineer: Secure SDLC & Cloud

Interac Corp.; Toronto; Hybrid; CAD 85,000 - 105,000; Full time

Benefits offered by this job

Generous vacation and wellness days

Employer-paid benefits coverage

RRSP program

Flexible hybrid work model

Employee assistance program

Parental leave top-up

United Way donation matching

Job summary

Interac Corp. is seeking an experienced Application Security Specialist to safeguard our fintech ecosystem. You will embed secure design into the SDLC, perform threat modeling, and work with engineering, product and cloud teams to mitigate vulnerabilities across web, mobile, and backend systems.

The role requires hands-on security testing, tooling expertise, and strong collaboration across functions. A hybrid work model is offered along with a comprehensive Total Rewards package.

Qualifications

• 5+ years of experience in application security within FinTech, SaaS, or cloud-native environments.
• Strong understanding of modern application architectures (microservices, APIs, containers, serverless).
• Expertise in DevSecOps practices and SSDLC frameworks.
• Hands-on experience with security tooling and secure coding practices.

Responsibilities

• Embed security controls and best practices into all phases of the SDLC; perform threat modeling and architecture assessments.
• Conduct application security assessments (SAST/DAST, dependency scanning, code reviews) and coordinate remediation.
• Maintain and optimize AppSec tools (SAST, SCA, DAST, secrets scanning) and integrate into CI/CD pipelines.
• Support audits and ensure regulatory alignment (PCI DSS, SOC2, OWASP).
• Collaborate with engineering, product, cloud teams and provide security training.

Job description

Interac Corp. is seeking an experienced Application Security Specialist to safeguard our fintech ecosystem. You will embed secure design into the SDLC, perform threat modeling, and work with engineering, product and cloud teams to mitigate vulnerabilities across web, mobile, and backend systems.

The role requires hands-on security testing, tooling expertise, and strong collaboration across functions. A hybrid work model is offered along with a comprehensive Total Rewards package.