Director leading IT and cybersecurity operations for the Azrieli Foundation, a Canadian philanthropic organization. Assessing technology risks, overseeing infrastructure, vendors, incident response and executive technology strategy.
About the role
- Full Stack Security Developer at RBC focused on embedding security into technology stack for financial transactions. Design, develop, and implement secure application systems while ensuring compliance with industry standards.
Responsibilities
- Join our innovative PayEdge Technology team at RBC, where we're building the security foundation for accounts payable and accounts receivable solutions
- Take ownership of designing, developing, and implementing secure application systems that protect critical financial transactions
- Drive Security Excellence: Lead application security reviews, threat modeling, and code reviews to identify and mitigate vulnerabilities before they reach production
- Own application security vulnerability management, from discovery through remediation and validation
- Design and implement automated security testing frameworks to enforce secure coding practices across the development lifecycle
- Ensure Compliance & Risk Management: Manage security release cycles and coordinate security patches across the organization
- Support compliance and regulatory processes, including PCI certification, penetration testing, and annual security assessments
- Identify and recommend security improvements to strengthen our overall application security posture
- Foster a Security Culture: Mentor development and security teams through targeted training and knowledge-sharing initiatives
- Collaborate across multiple departments and stakeholders to integrate security into agile project workflows
- Champion security best practices as a trusted technical advisor
Requirements
- Bachelor's degree in Computer Science, Engineering, or related field
- 5+ years of working experience with Laravel, PHP, and front-end technologies such as JavaScript, HTML, CSS and Angular framework
- 5+ years of hands-on experience with Java and SpringBoot
- 5+ years of experience working with RDBMS, e.g. MySQL, MSSQL, NoSQL, e.g. MongoDB, ELK and data streaming technologies (Kafka)
- Expert in OWASP, static/dynamic analysis, and common security tools including Burp Suite and OWASP Zap
- Strong skill in secure code review and remediation guidance
- Knowledge of API security, authentication/authorization (OAuth2, JWT, OpenID Connect)
- Understanding of secrets management and secure configuration practices
- Experience with CI/CD pipelines (Jenkins, GitHub, Vault, Security scanning tools, etc.)
- Familiarity with thread modeling methodologies (e.g. Stride, Pasta)
- Ability to work in an Agile environment
- Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner
Benefits
- A comprehensive Total Rewards Program including bonuses and flexible benefits
- Competitive compensation
- Stock where applicable
- Leaders who support your development through coaching and managing opportunities
- Ability to make a difference and lasting impact
- Work in a dynamic, collaborative, progressive, and high-performing team
- A world-class training program in financial services
- Flexible work/life balance options
- Opportunities to do challenging work
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Data Security Specialist protecting Sun Life’s financial - services data through DLP, CASB and insider - threat programs. Investigating cyber risks and advancing enterprise data protection.
Senior security advisor strengthening Desjardins's cooperative financial security posture. Leading strategic security initiatives, governance, policies and complex organization - wide projects.
Senior SaaS Security Manager protecting RBC’s banking platform from third - party cloud risks. Leading controls, vulnerability management, compliance, and security transformation initiatives.
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
LP
Senior Security Engineer (Global Security)
LinkedIn Recruiter Post
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.
SA&A Lead securing Azure applications and Microsoft platforms for PLATO, Canada’s Indigenous - owned software testing company. Leading authorization, control testing, evidence collection, and risk remediation.