At a Glance
- Tasks: Enhance application and cloud security through automation and integration in the software development lifecycle.
- Company: Join a forward-thinking tech company focused on security innovation.
- Benefits: Attractive salary, health benefits, remote work options, and opportunities for professional growth.
- Other info: Dynamic role with excellent career advancement potential in a supportive environment.
- Why this job: Make a real difference by securing cutting-edge applications and collaborating with talented teams.
- Qualifications: 7+ years in Application Security, strong coding skills in Python or Java, and expertise in security tools.
The predicted salary is between 108000 - 132000 $ per year.
The Security Engineer is responsible for enhancing application and cloud security by integrating security practices, automation, and tooling throughout the software development lifecycle.
This role requires a strong development background, expertise in modern application security tools, and the ability to work closely with engineering teams as a security subject‑matter expert.
The engineer will guide secure coding practices, implement CI/CD security controls, and support continuous improvement of the organization’s security posture.
Key Responsibilities
- Implement, manage, and optimize application security tools including SAST, SCA, DAST, WAF, and ASPM solutions.
- Build and automate security touchpoints within CI/CD pipelines using tools such as Git Hub Actions, Workflows, and Jenkins.
- Provide secure coding guidance and integrate security checks throughout the SSDLC and Dev Sec Ops processes.
- Conduct threat modeling, identify supply chain risks, and guide remediation efforts.
- Work with development teams as a Security SME to coach developers, showcase security tooling capabilities, and improve adoption.
- Leverage code scanning and security analysis tools (e. g., Veracode, Snyk, Git Hub Advanced Security) to detect and track vulnerabilities.
- Collaborate with engineering teams to integrate security into containerized, cloud, and infrastructure environments.
- Write secure, maintainable code in Python, Java, or other languages as needed for automation and tooling enhancements.
- Required Qualifications
- 7+ years of experience in Application Security or related domains (infrastructure, container, or cloud security).
- Strong development background with hands‑on experience in Python, Java, or similar programming languages.
- Expertise with application security concepts, including OWASP Top 10, threat modeling, supply chain security, and secure development practices.
- Experience with security tools covering SAST, SCA, DAST, WAF, and ASPM.
- Strong understanding of CI/CD pipelines and experience integrating security automation within them.
- Proficiency with Git Hub Actions, Workflows, Jenkins, or similar CI/CD orchestration tools.
- Hands‑on experience with application security tools such as Veracode, Snyk, or Git Hub Advanced Security.
- Experience coaching development teams, demonstrating security tooling benefits, and serving as a security subject‑matter expert.
- #J-18808-Ljbffr
Security Engineer in Toronto employer: Compunnel Inc.
Join a forward-thinking company in Toronto that prioritizes innovation and employee development. As a Digital Banking Engineering Manager, you'll thrive in a collaborative work culture that values continuous improvement and offers ample opportunities for professional growth. With a focus on modern banking solutions, this role not only allows you to lead a talented team but also empowers you to make a meaningful impact in the digital banking landscape.
