Azure SA&A Specialist supporting Government of Canada security assessments, controls, evidence, and testing. PLATO delivers Indigenous - owned software testing and technology services across Canada.
About the role
- Staff Security Engineer strengthening Jane’s clinic-management SaaS through architectural security fixes, AppSec leadership, and AI-assisted vulnerability analysis.
Responsibilities
- Identify recurring AppSec findings and turn them into architectural fixes
- Partner with product teams to design vulnerabilities out of software
- Lead product security projects end to end
- Develop private package repositories
- Mature software composition analysis tooling
- Improve the development lifecycle and GitHub workflows
- Build AI-assisted vulnerability analysis and draft-fix capabilities
- Build trusted relationships with developers and explain security risk in plain language
- Help teams adopt secure development practices
- Own security initiatives and represent Product Security in cross-functional groups
- Mentor teammates as the most senior hands-on engineer
Requirements
- Staff-level application security experience, including owning security initiatives end to end and working directly with development teams
- Development background; Ruby on Rails ideal, or Python, Java, or C# with willingness to work in a Rails codebase
- Ability to read a draft PR and assess whether the fix is correct
- Experience identifying systemic vulnerability patterns and driving architectural fixes with engineering teams
- Strong relationship skills with developers and stakeholders
- Hands-on experimentation with AI in security work, ideally building automation
- Experience securing AI features in a product is a strong asset
- Must be currently living and working in Canada
- Must be eligible to work in Canada without employer sponsorship
- No relocation, visa sponsorship, or third-party/employer-of-record employment support
Benefits
- Regular career development conversations with your manager
- Compensation growth as you gain experience and contribute meaningfully
- Comprehensive benefits package
- Remote-first work arrangement
Job title
Job type
Experience level
Salary
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Senior Security Engineer owning identity, IT automation, and cloud security for Maze, a user research platform. Driving vulnerability management, compliance, and secure infrastructure at scale.
Product Security Engineer securing WorkOS developer tools and APIs for enterprise authentication and identity. Leading secure design, offensive testing, tooling, and vulnerability remediation.
Senior Manager leading BDO Canada’s cybersecurity governance, risk, and compliance programs. Overseeing audits, vendor risk, security policies, regulatory compliance, and GRC team leadership.
Security Operations Analyst monitoring and protecting Flexspring's HR data integration platform and cloud infrastructure. Managing vulnerabilities, incident response, detection tooling, and SOC 2/ISO 27001 evidence.
Product Security Lead securing Miovision’s intelligent transportation products, cloud services, and connected devices. Leading secure - by - design engineering and product risk management for safer smart transportation networks.
Senior Security Engineer protecting Kin’s cloud - based homeowners insurance platform. Owning endpoint detection, AWS security, identity controls, and incident response.
Remote HSE Specialist supporting JLL’s Canadian property - management operations. Managing compliance, investigations, audits, training, and environmental and safety programs.
Staff Product Security Engineer securing Phantom’s self - custodial multi - chain crypto wallet. Assessing vulnerabilities, leading security projects, and integrating protection across development and platform teams.
Cybersecurity co - op protecting TD’s banking technology, data, and fraud systems. Testing security solutions, operating tooling, and mitigating cyber and technology risks.