Senior Application Security Engineer — Remote-First, AI-Driven Pentesting

Forward Financing LLC; Boston (MA); On-site; CAD 143,000 - 183,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision care

Flexible time-off

Parental leave

RRSP match

Wellness reimbursement

Volunteering days

Professional development budget

Charitable donation match

Job summary

Forward Financing seeks a security engineer to conduct manual penetration tests, review code, and build AI-assisted tooling that expands coverage across web apps, APIs, and AWS.

You will triage SAST findings, fix real vulnerabilities, and explain risk to engineers so fixes are prioritized, while helping shape AI-driven testing.

This remote-first role offers market-based CAD compensation with a target salary CAD 143,000–183,000 and a 10% annual bonus, plus comprehensive benefits.

Qualifications

• 5+ years in application security, offensive security, or product security.
• Hands-on pentesting and code-review depth across web apps, APIs, and AWS.
• Hacker mentality and curiosity about how systems break.
• Interest in using AI to solve problems in workflows.
• Understanding of AI/LLM attack surface and AI-generated code vulnerabilities.
• Experience with Ruby, Python, TypeScript, or Go, and secure SDLC practices.
• Ability to communicate risk to engineers.

Responsibilities

• Conduct manual penetration tests against systems and build AI-assisted tooling.
• Triage findings from SAST tools, fix real vulnerabilities, and tune false positives.
• Perform secure code review across web apps, APIs, and AWS infrastructure.
• Explain risk to engineers to help prioritize fixes and improvements.
• Support the test-to-prod review process for AI-built work.

Skills

Application security

Offensive security

Product security

Ruby

Python

TypeScript

Go

AWS

Secure SDLC

Risk communication

Education

Bachelor's Degree in Computer Science or equivalent

Tools

SAST tools

Job description

Forward Financing seeks a security engineer to conduct manual penetration tests, review code, and build AI-assisted tooling that expands coverage across web apps, APIs, and AWS.

You will triage SAST findings, fix real vulnerabilities, and explain risk to engineers so fixes are prioritized, while helping shape AI-driven testing.

This remote-first role offers market-based CAD compensation with a target salary CAD 143,000–183,000 and a 10% annual bonus, plus comprehensive benefits.