Senior IT Security Advisor (Application Security)

goeasy Ltd.; Mississauga; Hybrid; CAD 80,000 - 120,000; Full time

Job summary

Join a dynamic and fast-growing company as a Senior IT Security Advisor, where you'll lead efforts to enhance application security. This role involves integrating security into development processes, managing vulnerability assessments, and advising on risk mitigation strategies. You'll collaborate with cross-functional teams to secure APIs and strengthen the overall security posture. With a commitment to innovation and a flexible work environment, this opportunity offers you the chance to make a significant impact in a supportive and inclusive culture. If you're passionate about security and looking to advance your career, this role is for you.

Qualifications

• 5+ years in security domains, preferably Application Security/Risk Management.
• CISSP certification required; others like CISM, CIPP, GPEN preferred.

Responsibilities

• Integrate security pipelines into the development process.
• Manage SAST, SCA, DAST, and Penetration Testing activities.
• Conduct security assessments for various projects.

Skills

Web Application Security

OWASP Top 10

Vulnerability Scanning

Penetration Testing

Secure Coding Practices

CI/CD Pipelines

DevSecOps

Communication Skills

Education

Bachelor's Degree in a Relevant Field

Postgraduate Degree

Tools

SAST

SCA

DAST

Java

Python

JavaScript

R

Go

UNIX/Linux Systems

Job description

Senior IT Security Advisor (Application Security)

Join one of Canada's fastest-growing companies as a Senior IT Security Advisor (Application Security) at goeasy Ltd.

At goeasy, our culture and people are at the core of our success. Recognized for our outstanding workplace environment and growth, we are committed to fostering an inclusive, innovative, and high-performance culture. We provide a range of financial products and services to help Canadians build a brighter future.

As the Senior IT Security Advisor, you will lead efforts to identify and mitigate security vulnerabilities within goeasy’s application portfolio, working collaboratively across teams to strengthen our security posture.

Responsibilities

• Integrate security pipelines into the development process, implementing "Shift-left" and "Fail the Build" methodologies.
• Manage and execute SAST, SCA, DAST, and Penetration Testing activities.
• Prioritize vulnerabilities and collaborate with IT teams to address risks.
• Secure APIs through vulnerability scanning and attack mitigation.
• Advise on security by design and support project risk assessments.
• Identify and recommend remediation for security weaknesses in the technology stack.
• Conduct security assessments for various projects and initiatives.
• Provide guidance on information security and privacy matters.
• Evaluate and enhance existing security solutions.

Required Experience

• Strong understanding of web application security, OWASP Top 10, and exploitation techniques.
• Experience with CI/CD pipelines, DevSecOps, and secure coding practices.
• Ability to perform vulnerability scans and penetration tests.
• Experience reviewing architecture and security documentation.
• Proven ability to lead security projects and advise on risk mitigation.
• Excellent communication skills to liaise with technical and business teams.
• Bachelor’s degree in a relevant field; postgraduate degree preferred.
• Minimum of five years in security domains, preferably Application Security/Risk Management.
• Certifications such as CISSP (required), and others like CISM, CIPP, GPEN are preferred.
• Experience coding in Java, Python, JavaScript, R, or Go; familiarity with UNIX/Linux systems.

We offer a flexible work program with three days onsite per week at our Mississauga office.