Staff, Application Security Engineer (Remote - Canada)

Jobgether; British Columbia; Hybrid; CAD 143,000 - 178,000; Full time

Job summary

Jobgether is seeking a Staff, Application Security Engineer to enhance security for cloud-native applications. This senior role involves driving secure development practices, collaborating across teams, and implementing security tools in a remote-first environment, particularly for candidates in British Columbia, Ontario, or Alberta.

Benefits

Comprehensive health and wellness benefits

Flexible paid time off and generous parental leave

Remote-first environment with occasional travel

Inclusive workplace supporting diversity

Retirement savings program

Paid volunteer time

Qualifications

• 8+ years of experience in application security or related roles.
• Deep knowledge of cloud security (AWS, Azure, or GCP).
• Proficiency in programming languages like Python, Go, Java, or TypeScript.

Responsibilities

• Lead security engineering initiatives for application security.
• Implement and maintain security tools in CI/CD pipelines.
• Conduct research on threats and vulnerabilities.

Skills

Application security

Secure software development

Cloud security

Communication skills

Incident response

Research on vulnerabilities

Education

OSCP, GWAPT, or GCPN certifications

Tools

SAST

DAST

SCA

API security platforms

Job description

About Jobgether:

Jobgether is a Talent Matching Platform that partners with companies worldwide to efficiently connect top talent with the right opportunities through AI-driven job matching.

One of our companies is currently looking for a Staff, Application Security Engineer in Canada.

This is an exciting opportunity for a senior-level Application Security Engineer to play a critical role in enhancing security across high-scale, cloud-native applications. In this role, you will drive secure development practices, implement automated security solutions within CI/CD pipelines, and collaborate with cross-functional teams to ensure resilient and secure software delivery. You’ll be a key player in shaping security strategy, leading initiatives to reduce vulnerabilities, and staying ahead of emerging threats. This is a remote-first role open to candidates based in Alberta, Ontario, or British Columbia.

Accountabilities:

• Lead security engineering initiatives that enhance application security posture across teams.
• Implement and maintain security tools including SAST, SCA, DAST, and secrets management.
• Drive automation of security controls in CI/CD pipelines for scalable enforcement.
• Develop and deliver secure coding standards and training for engineering teams.
• Collaborate with internal stakeholders to investigate vulnerabilities and support incident response.
• Conduct research on the latest threats, vulnerabilities, and attack vectors to guide proactive defenses.
• Continuously assess the effectiveness of security measures and recommend improvements.

• 8+ years of experience in application security, secure software development, or related roles.
• Deep knowledge of cloud security for web apps, APIs, and containers (AWS, Azure, or GCP).
• Hands-on experience with security tools such as SAST, DAST, SCA, and API security platforms.
• Solid understanding of OWASP Top 10 and secure coding practices.
• Proficiency in one or more programming languages such as Python, Go, Java, or TypeScript.
• Excellent communication skills with the ability to convey technical concepts to diverse stakeholders.
• Preferred: certifications like OSCP, GWAPT, or GCPN, and experience with threat modeling.

• Competitive salary: Estimated between $143,000 and $178,000 CAD (British Columbia-based).
• Comprehensive health and wellness benefits.
• Flexible paid time off and generous parental leave.
• Remote-first environment with occasional travel for team collaboration.
• Inclusive workplace supporting diversity, equity, and belonging.
• Retirement savings program and financial wellness support.
• Paid volunteer time and programs to support community engagement.

Jobgether hiring process disclaimer

This job is posted on behalf of one of our partner companies. If you choose to apply, your application will go through our AI-powered 3-step screening process, where we automatically select the 5 best candidates.

Our AI thoroughly analyzes every line of your CV and LinkedIn profile to assess your fit for the role, evaluating each experience in detail. When needed, our team may also conduct a manual review to ensure only the most relevant candidates are considered.

Our process is fair, unbiased, and based solely on qualifications and relevance to the job. Only the best-matching candidates will be selected for the next round.

If you are among the top 5 candidates, you will be notified within 7 days.
If you do not receive feedback after 7 days, it means you were not selected. However, if you wish, we may consider your profile for other similar opportunities that better match your experience.

Thank you for your interest!

#LI-CL1