Application Security Engineer
J
JobgetherApplication security
Work remotely from CanadaFull-TimeJunior
Salary not disclosed
Apply NowOpens the employer's application page
Job Details
- Experience
- 2–4 years of experience in application security, security engineering, software engineering, quality assurance (QA), or a related technical role.
- Required Skills
- PythonCI/CD
Requirements
- Have 2–4 years of experience in application security, security engineering, software engineering, QA, or a related technical role.
- Have working knowledge of common application vulnerabilities, particularly the OWASP Top 10.
- Be familiar with secure software development lifecycle (SSDLC) practices.
- Have basic scripting skills, preferably in Python.
- Be able to analyze scan results, distinguish genuine vulnerabilities from false positives, and prioritize findings by risk and impact.
- Be familiar with security tooling and vulnerability management processes.
- Be able to manage findings across multiple tools and projects with attention to detail.
- Be able to explain technical security issues and remediation recommendations to software developers.
- Familiarity with CI/CD pipelines and integrating automated security scans is an asset.
- Exposure to DefectDojo, Dependency-Track, TruffleHog, Trivy, and/or Semgrep is an advantage.
- Be motivated to develop expertise in security tool integrations, automation, and custom security rule development.
Responsibilities
- Operate and maintain SAST, SCA, secrets scanning, and container scanning tools throughout the software development lifecycle.
- Review and triage security findings, validate true positives, assess risks, and work with engineering teams to prioritize remediation.
- Track vulnerabilities from identification through resolution and monitor remediation progress against SLAs.
- Support onboarding repositories and services into existing security scanning tools and workflows.
- Communicate findings and actionable remediation guidance to developers and other stakeholders.
- Maintain internal documentation, operational runbooks, and procedures.
- Identify opportunities to improve security processes and workflows.
- Assist senior team members with scripting, automation, and tool integration tasks.
View Full Description & ApplyYou'll be redirected to the employer's site
