Product Security Specialist
New
G
GeotabConnected transportation
Location: Oakville, Ontario - Canada; Working Conditions: Remote & TravelFull-TimeSenior
Salary85,500 - 105,600 CAD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 5 - 8 years of required previous experience in security evaluation/analysis, security code reviews, or relevant development experience
- Required Skills
- PythonBashC#.NET
Requirements
- Have 5–8 years of experience in security evaluation or analysis, security code reviews, or relevant development.
- Have a bachelor’s degree in Computer Science, Information Management, Engineering, or a related field, or an equivalent combination of education and work experience.
- Have experience using source-code, dynamic, and dependency scanners, such as Veracode, Fortify, Sentinel, OWASP Dependency, NetSparker, or Qualys.
- Know programming languages including C, C#, .NET, Python, and JavaScript/TypeScript.
- Know web service technologies including XML, JSON, SOAP, and REST.
- Have experience with dependency package managers such as npm and NuGet.
- Be competent with Linux, Windows, GCE, Bash, and Python, and able to acquire new programming languages quickly.
- Communicate risk assessments and technical findings to developers and management.
- Manage multiple tasks and projects with accuracy and attention to detail.
- Security certifications and experience in a technical or engineering high-technology industry are considered an asset.
Responsibilities
- Review existing, new, and proposed products using source-code, dynamic, and dependency scanners, manual code reviews, and security architecture reviews.
- Validate scanner findings by tracing source code across applicable codebases and recommend code remediation to developers.
- Explain risk assessments to technical and non-technical audiences.
- Write and maintain Bash and Python scripts to prepare scan inputs, automate scanner execution, and integrate scanners with CI pipelines, Google Cloud storage, and reporting mechanisms.
- Contribute to secure coding standards and develop secure coding training for developers.
- Write assessment reports and vulnerability descriptions for product owners and developers.
- Support secure product architecture design and implementation, and conduct security testing, penetration testing, and threat modeling.
- Assess scanner coverage, recommend ways to address coverage gaps, and follow up on issues.
- Monitor emerging product security threats and vulnerabilities and respond to time-sensitive vulnerability reports.
- Collaborate with development teams to integrate security practices throughout the product lifecycle.
View Full Description & ApplyYou'll be redirected to the employer's site
