Software Developer Specialist designing next-generation security products at Intact. Focusing on building secure software engineering solutions and automation platforms.
Responsibilities
Join our security team to design and build next‑generation security products that reshape how secure software is developed and deployed.
Craft automation platforms, intelligent services, and self‑service experiences that embed security into modern engineering workflows with minimal friction.
Focus on secure software engineering and product development to deliver forward‑looking solutions from practical remediation guidance to proactive posture insights - that scale across Intact’s application and infrastructure landscape.
Architect and build reusable services, APIs, and libraries that operationalize application security best practices at scale.
Implement features and enhancements across backend and/or frontend components.
Write clean, maintainable code.
Create automation that orchestrates compliance evaluation.
Develop self‑service security products that streamline SSDLC and accelerate secure delivery.
Implement AI‑assisted capabilities for contextual vulnerability triage, and proactive guardrails.
Automate posture analytics and executive‑ready dashboards (Grafana, Power BI) to surface trends, coverage, and risk signals.
Work closely with product, architect, and design to ensure functionality meets user needs.
Drive adoption through demos, guidance, and workshops.
Requirements
Degree in Software Engineering, Computer Science, or related field
7+ years building production software and platforms with a focus on automation, integrations, and product reliability.
Proven experience owning end‑to‑end product from technical design and prototyping through implementation, testing, rollout, and maintenance.
Strong system design skills to design scalable, resilient, and observable services.
Familiarity with design patterns and trade‑offs.
Expertise in at least one backend language (Java, Python, Go, or Node.js/TypeScript) and related frameworks (Spring Boot/MVC, Express.js, NestJS).
Good frontend experience building SPAs (preferably Angular; React or Next.js also acceptable), including component architecture, state management, and secure UX patterns.
Clean coding, automated testing (unit/integration/e2e), code reviews, and continuous improvement.
Experience building secure APIs and integrations (REST/GraphQL), including authorization, input validation, and error handling.
Comfort with data modeling and persistence (SQL/NoSQL), performance tuning, and migration strategies.
Knowledge of logging, metrics, tracing, health checks, performance profiling, and SLOs.
Experience designing and implementing CI/CD pipelines for application delivery, including adding security steps and quality gates.
Ability to decompose complex problems, define clear acceptance criteria, and deliver iteratively with measurable outcomes.
Guide peers, drive design reviews, and influence architecture.
Familiarity with cloud‑native application design (AWS/Azure/GCP), containerization (Docker), and basic orchestration concepts (Kubernetes) with security considerations.
Exposure to AI/LLM product development, prompt engineering, model integration, evaluation/validation, and data privacy considerations.
Working knowledge of application security fundamentals and standards (e.g., OWASP Top 10, secure coding practices, supply chain security).
Experience integrating or operating SAST/DAST, dependency, and cloud security tools, capable of integrating vendor products into developer workflows.
Excellent communication skills, able to translate security and engineering concepts for diverse audiences.
No Canadian work experience required however must be eligible to work in Canada.
For candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English-speaking colleagues across the country
Benefits
Flexible work arrangements and a hybrid work model
Possibility to purchase up to 5 extra days off per year
Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more
Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)
Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.
SA&A Lead securing Azure applications and Microsoft platforms for PLATO, Canada’s Indigenous - owned software testing company. Leading authorization, control testing, evidence collection, and risk remediation.