Senior Application Security Engineer – Snyk, SAST, SCA & DAST

Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!; Toronto; On-site; CAD 120,000 - 160,000; Full time

Job summary

Astra-North Infoteck Inc. is seeking a Senior Application Security Engineer to lead advanced security testing and tooling in a large enterprise. You will drive SAST/SCA/DAST initiatives, manage Snyk-based deployments, and support regulated industries with secure software development practices.

The role requires deep expertise in secure development, industry frameworks, and certification-aligned credentials, with a focus on delivering robust security controls across complex environments.

Qualifications

• 10 years of experience in Application Security or related fields.
• 5 years hands-on with enterprise SAST, SCA, DAST platforms.
• 3 years with Snyk and related tooling.
• Experience migrating tooling in large enterprise environments.

Skills

Application Security

Cybersecurity

DevSecOps

SAST

SCA

DAST

Regulated industries

Education

Snyk certifications or advanced training

CISSP/CSSLP/GWAPT/GWEB/CEH/AWS/Azure security or equivalent

Tools

Snyk

Job description

Senior Application Security Engineer - Snyk, SAST, SCA & DAST

• 10 years of experience in Application Security, Cybersecurity, or DevSecOps.
• 5 years of hands-on experience with enterprise SAST, SCA, and DAST platforms.
• 3 years of implementation, administration, or engineering experience with Snyk.
• Demonstrated experience migrating application security tooling, preferably from Veracode to Snyk, in a large enterprise environment.
• Experience supporting regulated industries such as banking, financial services, insurance, healthcare, or government.
• Snyk product certifications or advanced Snyk platform training. CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials.
• Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.