Application Security Engineer securing GenAI products and emerging businesses. Building security tools, reviewing code, and improving application, cloud, and infrastructure security at Liftoff’s mobile marketing platform.
About the role
- Application Security Engineer operating Newfold Digital’s AppSec scanning program for its global web technology products. Triaging vulnerabilities and partnering with engineering teams on remediation.
Responsibilities
- Operate and maintain AppSec scanning tools, including SAST, SCA, secrets scanning, and container scanning, across the SDLC
- Triage findings, validate true positives, and prioritize remediation with engineering teams
- Track vulnerabilities through closure and monitor SLA compliance
- Support onboarding of new repositories and services into security tooling
- Contribute to internal documentation, runbooks, and process improvements
- Assist with basic scripting and automation tasks under guidance from senior team members
Requirements
- 2–4 years in application security, security engineering, or a related software/QA engineering role
- Working knowledge of common vulnerability classes (OWASP Top 10) and secure SDLC practices
- Basic scripting ability; Python preferred
- Comfortable communicating findings clearly to developers
- Strong attention to detail and ability to manage a queue of findings across multiple tools
- Exposure to Defect Dojo, Dependency-Track, Truffle Hog, Trivy, and/or Semgrep is nice to have
- Familiarity with CI/CD pipelines and how security scans plug into them is nice to have
- Interest in growing into tool integration, automation, or custom rule-writing over time is nice to have
Benefits
- Work-life balance
- Diversity and inclusion programs
- Learning and development opportunities
- 20+ affinity groups for networking and connection
- Competitive HMO benefits – 175k MBL with one free dependent upon one year of service
- Punctuality Bonus
- Generous Vacation policy
- Mentorship and career growth opportunities
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Application security leader strengthening Spring Financial’s Canadian fintech platforms. Driving secure development, cloud security, AI security, compliance, and incident response.
Technical application specialist supporting S&C’s electrical grid protection products and customers. Preparing proposals, coordinating orders, and applying medium - voltage protection engineering.
Senior engineer supporting Honeywell’s industrial automation and blending applications. Resolving customer issues, testing releases, training customers, and mentoring global support teams.
Vehicle Applications Engineer coordinating engineering requirements, bids, and bills of material for transit buses and coaches. Supporting production contracts and sales opportunities in Winnipeg.
Senior software engineer extending Auth0 and OpenFGA identity and authorization systems. Building secure permissions for human users and AI agents at Basis, a digital media automation platform.
Application Support Engineer supporting cryptocurrency trading systems and production environments. Handling incidents, releases, monitoring, automation, and L2/L3 technical support for global business users.
Senior Application Security Engineer embedding Secure by Design, threat modeling, and AI - assisted vulnerability remediation. Strengthening security for Lightspeed’s global cloud commerce platform serving merchants worldwide.
Applications Engineer developing technical and commercial quotations for Innomotics’ motors, VFDs, and drive systems. Supporting mining and heavy - industrial customers across Canada from proposal through execution.
Senior Application Security Engineer leading Trimble’s global SCA and SAST strategy. Embedding automated security into CI/CD pipelines across diverse technology stacks.