Senior DevSecOps & App Security Engineer

Cognizant; Toronto; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

A leading IT services firm is seeking an App Security Specialist in Toronto. The role requires 6-9 years of software development and DevOps experience, with a strong focus on secure coding and API security. Responsibilities include developing secure APIs, optimizing data security measures, and integrating security into CI/CD pipelines. Familiarity with languages like Python and JavaScript is essential. The position offers a hybrid work model and a chance to work in a collaborative security-focused environment.

Qualifications

• 6-9 years total experience in software development and DevOps.
• At least 2-3 years hands-on security exposure including secure coding.
• Deep application of secure coding frameworks and vulnerability prevention.

Responsibilities

• Secure API development and design RESTful APIs.
• Work with PostgreSQL and secure data structures.
• Contribute to system architecture with Security by Design.

Skills

DevSecOps

Gen AI Security

Secure coding (OWASP Top 10, SANS CWE)

API security (OAuth2, JWT, input validation)

CI/CD security integration (SAST, DAST, dependency scanning)

Programming in Python, JavaScript, Java, or Go

PostgreSQL database security

Threat modeling & secure architecture reviews

Security automation scripting

Job description

A leading IT services firm is seeking an App Security Specialist in Toronto. The role requires 6-9 years of software development and DevOps experience, with a strong focus on secure coding and API security. Responsibilities include developing secure APIs, optimizing data security measures, and integrating security into CI/CD pipelines. Familiarity with languages like Python and JavaScript is essential. The position offers a hybrid work model and a chance to work in a collaborative security-focused environment.