Product Security Specialist ensuring security within software development lifecycle at Safe Software. Focused on vulnerability management and improving security tools and processes.
Responsibilities
Monitor, triage, and analyze vulnerability findings from commercial and internal tools, distinguishing true positives from false positives and duplicates.
Assess vulnerability impact in the context of Safe’s products and architectures, and document findings clearly for engineering teams.
Own vulnerability findings through investigation, prioritization, and handoff to development teams.
Maintain and update metadata used to track third-party dependencies and software components.
Conduct security and compliance reviews of third-party libraries and vendor components, including licensing and known risk signals.
Respond to internal and customer-facing questions regarding vulnerabilities and product security posture.
Assist with security questionnaires, audits, and other compliance-related inquiries.
Identify opportunities to improve or automate vulnerability monitoring, triage workflows, and tooling efficiency.
Requirements
1-2 years of experience in product security, application security, or a closely related cybersecurity role.
Solid understanding of common vulnerability classes and secure development practices (e.g., OWASP Top 10).
Experience working with vulnerability scanning tools, particularly software composition analysis (SCA) tools.
Proficiency in Python for automation, tooling, or analysis.
Strong analytical skills and the ability to interpret noisy or incomplete data.
Clear communication skills for technical and non-technical audiences.
A degree in Computer Science, Cybersecurity, Information Technology, or a related field—or equivalent practical experience.
Nice to Have: Familiarity with compliance frameworks such as SOC 2 or ISO 27001.
Security certifications (e.g., CISSP, CISM, or similar).
Experience in SaaS or product-focused engineering environments.
Benefits
Meaningful Work: Make a profound impact across our business, workplace and data integration product.
A Supportive Environment: Feel empowered to share your ideas and implement them with high autonomy and team support.
Social Responsibility: Become part of a team that finds meaningful ways to give back. Take paid time off to volunteer for one of our Safe-organized opportunities that align with our core community initiatives.
Learning & Career Development: We believe in your continuous learning and growth. Take advantage of an annual learning budget and training programs paid for by Safe.
Flexible Working Hours: Flexible and remote-friendly work arrangements to fit your lifestyle. Work when you want, and how you want to.
Work-Life Balance: There's no place for burnout at Safe. Maintain a healthy balance of your personal and work life without splitting yourself in two. Enjoy 3 weeks of vacation to recharge, plus an additional paid 6 seasonal days off per year.
Health & Wellness: Extended health, dental, health or lifestyle spending, and counseling benefits from day 1. That’s right, no waiting period.
Family is important: We are dedicated to supporting our employees through parenthood and offer a Parental Leave Top-Up Program for new parents through childbirth or adoption.
Shared Success: Share in Safe’s success with our bi-annual profit sharing and RRSP/TFSA matching program.
An Accessible Commute: Regardless of your commute method, we’re located close to public transit, and provide complimentary parking and bike storage for our team!
Senior IT Security Engineer at NEAR Foundation leading information security program and compliance initiatives. Partnering with IT teams for secure architectural design and risk management.
Bilingual Security Director for International SOS driving revenue growth of health security subscription services in Canada. Supporting consulting, training, and managed services with trusted client relationships.
Program Manager driving complex engineering projects within the Product Security organization at CrowdStrike. Collaborating cross - functionally to ensure timely delivery of security solutions across product portfolios.
Security Engineer focused on matching technology opportunities with customer business objectives at Tenable. Delivering technical presentations and driving successful customer engagements in cybersecurity solutions.
Business Development & Capture Lead for Global Spatial Technology Solutions driving revenue growth in defence sector. Engaging senior stakeholders and leading proposal development across global markets from a remote location.
IT & Security Specialist managing IT operations, security, and infrastructure for Senstar, a leader in security technology. Hands - on role blending end - user support, cybersecurity, and infrastructure management.
HR Systems Security Specialist responsible for design, configuration, and administration of security within Workday and SAP. Collaborating with HR and stakeholders to ensure effective access design and compliance.
Cybersecurity advisor working within the DCYB to develop IT security measures. Collaborating with teams to fortify cybersecurity posture and ensuring data protection for citizens.
Consultant in remuneration and occupational health and safety at the Quebec Federation of Municipalities. Ensuring employee needs match organizational requirements and promoting a safe work environment.
Cybersecurity Administrator providing operational support for compliance activities in information security. Assisting vendor risk management, audit coordination, and vulnerability tracking.