Azure SA&A Specialist supporting Government of Canada security assessments, controls, evidence, and testing. PLATO delivers Indigenous - owned software testing and technology services across Canada.
About the role
- Security Engineer protecting Chess.com’s global online chess platform. Managing vulnerabilities, threat modeling, incident response, and secure engineering practices.
Responsibilities
- Lead the vulnerability management program by triaging, reproducing, and assessing security vulnerabilities submitted through Bug Bounty programs
- Work directly with engineering teams to prioritize and remediate security gaps
- Conduct threat modeling with engineering teams to analyze proposed solutions and identify potential attack vectors before implementation
- Manage security incident response by reviewing penetration testing results and SIEM reports
- Translate technical findings into actionable remediation tasks and track resolution through completion
- Optimize security infrastructure by updating Web Application Firewalls and other security systems
- Evaluate and implement security software solutions, including vendor demonstrations and procurement processes
- Provide security consultation and guidance to development teams on secure software development and architecture
- Communicate security updates, progress reports, and recommendations to stakeholders
- Maintain current security policies and procedures
Requirements
- Bachelor's degree in Computer Science, Information Security, or related technical field, or equivalent professional experience
- Minimum 3+ years of professional experience specifically in web application security
- Expertise with security testing tools such as Burp Suite or equivalent web request analysis and tampering tools
- Strong written communication skills in English and ability to explain technical security concepts to diverse audiences
- Experience working effectively in fully distributed/remote team environments
- Ability to collaborate cross-functionally with engineering and development teams
- Previous hands-on experience managing or participating in Bug Bounty programs
- Programming experience in PHP or JavaScript
- Experience with penetration testing methodologies and tools
- Knowledge of SIEM platforms and security monitoring systems
- Familiarity with Web Application Firewall (WAF) configuration and management
- Understanding of secure software development lifecycle (SDLC) practices
- Experience with Jira or similar project management and issue tracking systems
- Strong sense of ownership and accountability
- Passion for continuous learning and staying current with evolving security threats and technologies
Benefits
- Fully remote work-from-anywhere arrangement
- Flat, no-corporate culture
- Full-time opportunity
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Security Engineer owning identity, IT automation, and cloud security for Maze, a user research platform. Driving vulnerability management, compliance, and secure infrastructure at scale.
Product Security Engineer securing WorkOS developer tools and APIs for enterprise authentication and identity. Leading secure design, offensive testing, tooling, and vulnerability remediation.
Senior Manager leading BDO Canada’s cybersecurity governance, risk, and compliance programs. Overseeing audits, vendor risk, security policies, regulatory compliance, and GRC team leadership.
Security Operations Analyst monitoring and protecting Flexspring's HR data integration platform and cloud infrastructure. Managing vulnerabilities, incident response, detection tooling, and SOC 2/ISO 27001 evidence.
Product Security Lead securing Miovision’s intelligent transportation products, cloud services, and connected devices. Leading secure - by - design engineering and product risk management for safer smart transportation networks.
Senior Security Engineer protecting Kin’s cloud - based homeowners insurance platform. Owning endpoint detection, AWS security, identity controls, and incident response.
Remote HSE Specialist supporting JLL’s Canadian property - management operations. Managing compliance, investigations, audits, training, and environmental and safety programs.
Staff Product Security Engineer securing Phantom’s self - custodial multi - chain crypto wallet. Assessing vulnerabilities, leading security projects, and integrating protection across development and platform teams.
Cybersecurity co - op protecting TD’s banking technology, data, and fraud systems. Testing security solutions, operating tooling, and mitigating cyber and technology risks.