Application Security Specialist: SCA & Secure DevOps

rbc; Toronto; On-site; GBP 68,000 - 91,000; Full time

Job summary

RBC is seeking an Intermediate Developer to join the Application Security team as a bridge between security and development. You will provide hands-on security expertise with a focus on Software Composition Analysis and secure coding practices across enterprise projects.

You will support application teams, triage SCA results, and drive security improvements while continuing to grow your development skills in a collaborative environment.

Qualifications

• Familiarity with application security best practices.
• Experience with SCA tools or open-source dependency management.
• 2+ years of professional experience developing consuming REST APIs.
• Basic understanding of open-source security.
• Strong proficiency in at least one primary language: Python, Java, JavaScript, or .NET.
• Solid understanding of HTTP, API design patterns and RESTful principles.
• Experience with relational databases and SQL.
• Hands-on experience with CI/CD tools (Jenkins, GitHub Actions, GitLab CI).
• Experience with Threat Modelling and Risk Assessment activities.
• Understanding of agile methodology (Scrum, Kanban).
• Experience with data visualization or analytics tools.
• Knowledge of software design patterns and SOLID principles.
• Knowledge of OWASP, SANS, or other security frameworks.
• Willingness to learn and grow in application security specialization.

Responsibilities

• Support end users of application security testing tools, managing tickets.
• Triage SCA scan results and communicate needs to application teams.
• Act as primary contact for application teams bridging security and development.
• Drive security practices and improve enterprise security posture.
• Educate stakeholders on application security and open source vulnerabilities.
• Integrate application security processes and tools into development pipelines.
• Participate in and lead application security assessment activities.
• Contribute to design/implementation of testing workflows and troubleshoot configurations.
• Design and develop RESTful APIs following security standards.
• Write clean, maintainable code for data processing and analysis.
• Leverage open source packages responsibly, aware of security implications.
• Collaborate with senior developers and security consultants to deliver solutions.
• Participate in code reviews and improve security/development practices.

Job description

RBC is seeking an Intermediate Developer to join the Application Security team as a bridge between security and development. You will provide hands-on security expertise with a focus on Software Composition Analysis and secure coding practices across enterprise projects.

You will support application teams, triage SCA results, and drive security improvements while continuing to grow your development skills in a collaborative environment.