Remote Senior App Security Engineer - SDLC Champion

Canary Technologies; Arkansas; On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Canary Days: monthly days off for re充

Self Improvement Club

Professional Development Chats

Travel Reimbursement

Personal Travel Reimbursement

Job summary

Canary Technologies, a fully remote leader in hospitality software, seeks a Senior Application Security Engineer to embed security into our SDLC and drive tooling strategy with developers, SREs, and data engineers. You will own application security tooling, automation, and developer enablement while keeping our platform secure and scalable.

You will partner with product and engineering teams to integrate SAST/DAST/SCA in CI/CD, enforce least-privilege access, manage secrets, and design secure

Qualifications

• 6+ years in security engineering or DevSecOps.
• Strong experience integrating security into modern SDLC pipelines.
• Hands-on with AppSec tooling (Snyk, OWASP ZAP, Burp Suite, SonarQube, Checkmarx).
• Solid understanding of web app security (OWASP Top 10, API security, auth flows).

Responsibilities

• Define and enforce best practices for secure coding, dependency management, and design reviews across engineering teams.
• Integrate and manage SAST, DAST, and SCA tools within CI/CD pipelines (e.g., GitHub Actions).
• Partner with developers on new features and systems to identify risks early in the lifecycle.
• Implement best practices for secrets handling, API authentication/authorization, and data protection.
• Build security guidelines, training, and reusable libraries/patterns so that teams can ship secure code faster.
• Triage and prioritize findings from bug bounties, penetration tests, and automated scans.

Skills

Security engineering

DevSecOps

AppSec tooling

AWS security

Kubernetes security

Python

Go

JavaScript

Terraform

GitOps

Incident response

Tools

Snyk

OWASP ZAP

Burp Suite

SonarQube

Checkmarx

Trivy

Falco

Snyk

Job description

Canary Technologies, a fully remote leader in hospitality software, seeks a Senior Application Security Engineer to embed security into our SDLC and drive tooling strategy with developers, SREs, and data engineers. You will own application security tooling, automation, and developer enablement while keeping our platform secure and scalable.

You will partner with product and engineering teams to integrate SAST/DAST/SCA in CI/CD, enforce least-privilege access, manage secrets, and design secure