Senior/Principal App Sec Engineer - Cloud & DevSecOps

Halliburton; Calgary; On-site; CAD 90,000 - 140,000; Full time

Job summary

Halliburton Landmark is seeking an Application Security Engineer in Calgary to identify and reduce security risk across software products and cloud platforms. You will conduct security assessments, analyze testing results, and partner with engineering teams to remediate vulnerabilities.

The role spans secure SDLC, DevSecOps, cloud security, and software supply chain security, requiring clear communication of risks to developers and stakeholders.

Qualifications

• Bachelor’s degree in computer science or related field.
• At least 3 years in software development or security roles.
• Knowledge of SDLC and secure coding practices.
• Experience identifying or remediating vulnerabilities in software.
• Ability to communicate security risks to engineers clearly.

Responsibilities

• Perform application security assessments across web apps, APIs, cloud services, and enterprise software.
• Review SAST/DAST/CSA results and remediation.
• Prioritize remediation based on risk and impact.
• Collaborate with engineers to remediate vulnerabilities.
• Support CI/CD security controls and secure development workflows.
• Contribute security requirements throughout the SDLC.
• Review architectures for security weaknesses and misuse scenarios.
• Retest remediated vulnerabilities and document results.
• Assess risks in open-source components and third-party dependencies.
• Document results, remediation guidance, and risk decisions clearly.

Skills

Application Security

DevSecOps

Secure SDLC

Vulnerability Mgmt

Cloud Security

SAST

CI/CD

OWASP

Education

Bachelor’s degree in CS

Tools

GitLab

Terraform

Python

PowerShell

Bash

Azure

AWS

Job description

Halliburton Landmark is seeking an Application Security Engineer in Calgary to identify and reduce security risk across software products and cloud platforms. You will conduct security assessments, analyze testing results, and partner with engineering teams to remediate vulnerabilities.

The role spans secure SDLC, DevSecOps, cloud security, and software supply chain security, requiring clear communication of risks to developers and stakeholders.