Application Security Engineer II
J
JobgetherApplication security
Based in CanadaFull-TimeMiddle
SalaryExpected total cash compensation range of CAD $118,200–$152,900 for candidates based in Ontario or British Columbia, including base salary and variable pay where applicable.
Apply NowOpens the employer's application page
Job Details
- Experience
- 4+ years of professional experience in software engineering, application security, or a closely related field.
Requirements
- 4+ years of professional experience in software engineering, application security, or a closely related field.
- Practical experience with threat modeling, secure design patterns, authentication and authorization, secrets management, and vulnerability remediation.
- Strong understanding of secure coding principles and common application security risks, including the OWASP Top 10.
- Ability to assess security risks, break down complex technical problems, evaluate tradeoffs, and recommend practical solutions.
- Experience collaborating directly with software engineers and product teams to integrate security into development and architecture processes.
- Ability to independently manage assigned work, maintain momentum, and follow through to completion.
- Clear written and verbal communication skills, including explaining security concepts and vulnerabilities to engineers with varying levels of security expertise.
- Sound technical judgment and ability to balance security requirements with product, engineering, and business priorities.
- Ability to work effectively in a collaborative, remote environment and contribute to cross-functional initiatives.
Responsibilities
- Own and deliver application security initiatives within defined projects, products, or technical domains.
- Identify, assess, prioritize, and help remediate application security vulnerabilities with engineering teams.
- Apply secure-by-default patterns, approved architectures, and reusable security practices when designing or reviewing systems.
- Partner with Product and Engineering teams to assess security risks and recommend practical improvements.
- Participate in application security design reviews and threat modeling exercises for new and existing systems.
- Write and review code, technical documentation, and security guidance to address vulnerabilities and prevent recurring issues.
- Embed security controls into developer workflows, architectures, tooling, and infrastructure.
- Participate in security incident response and contribute to post-incident analysis, lessons learned, and remediation.
- Collaborate with security engineers and cross-functional partners to strengthen application and cloud security practices.
View Full Description & ApplyYou'll be redirected to the employer's site
