Information Security Officer at Vecima Networks responsible for ISMS maintenance and ISO compliance. Supporting governance activities, supplier security, and incident response during maternity leave coverage.
About the role
- Senior Security Engineer focusing on Application Security and Vulnerability Management for cybersecurity firm. Collaborating with teams on security operations, incident response, and compliance initiatives.
Responsibilities
- Triage and coordinate remediation of vulnerabilities across SAST, SCA, DAST, CSPM, external reconnaissance, security advisories, and bug reports
- Own the SAST, DAST, and SCA technical stack end-to-end including configuration, execution, triage, and reporting across Solink's technology stack
- Lead Solink's shift-left security program by embedding security guardrails, automated checks, and developer tooling into IDEs and CI/CD pipelines to identify issues early and drive adoption across teams
- Leverage AI-powered security tools and modern techniques for vulnerability discovery and triage, combining them with practical experience and traditional security tooling.
- Develop scalable practices, automation workflows, and documentation that raise the security bar across the organization
- Participate in architecture reviews and threat modeling exercises, providing security and compliance guidance across product-engineering and corporate systems.
- Conduct source code and whitebox security assessments, providing actionable recommendations to improve security posture
- Support incident response activities, including investigation, containment, recovery, and post-incident reviews.
- Contribute to threat hunting and red team exercises across AWS, Kubernetes, and other cloud environments.
- Support compliance initiatives, evidence collection, audit readiness and the ongoing automation of compliance processes.
- Help teams adopt AI tools securely by contributing to AI threat modeling, implementing appropriate controls, and addressing emerging AI-related risks.
- Partner with IT Services and corporate stakeholders on endpoint security, EDR, and broader security operations initiatives.
- Execute penetration tests for web, mobile, and API applications.
Requirements
- 8+ years of experience in security engineering, application security, cloud security, or related disciplines, with hands-on experience securing production environments
- Deep expertise in application security and vulnerability management, including SAST, DAST, SCA, penetration testing, and secure code review
- Experience integrating security tooling into CI/CD pipelines and DevSecOps workflows
- Proficiency in at least one scripting language (Python, Go, or equivalent), with experience building and automating security tooling
- Hands-on cloud security experience in AWS or GCP
- Experience with SIEM platforms, detection engineering, incident investigation, and security operations
- Strong understanding of IAM, including SSO, MFA, RBAC, PAM, and identity threat detection
- Knowledge of OWASP Top 10, secure development practices, software supply chain security, and SBOMs
- Comfortable leveraging AI-powered tools and adapting to emerging security technologies
- Bachelor's degree in Information Security, Computer Science, Engineering, or equivalent practical experience.
Benefits
- Fully paid health & dental (no waiting period) + $500 health spending account
- Monthly reimbursement for fitness, wellness, or mental health programs
- Meaningful equity: Every full-time, permanent employee has a stake in our growth
- Advancement based on contribution, initiative, and the ability to raise the bar - together
- Clear expectations, honest feedback, and no politics
- Social connection through company events and activities
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
LP
Cloud Security Architect
LinkedIn Recruiter Post
Cloud Security Architect needed for a TOP5 Bank in Canada. 4 - month contract, 2 days/week in Toronto. Rate $100 - $110/hr INC.
LP
Cloud Security Architect
LinkedIn Recruiter Post
Cloud Security Architect needed for a top 5 bank in Canada. 4 - month contract, 2 days/week in Toronto. Rate: $100 - $110/hr INC.
GA
Information Security Officer specializing in application and product security for the Government of Alberta. Safeguarding digital services through collaboration and compliance with cybersecurity policies.
Security Analyst I supporting security operations and security engineering initiatives at Varicent. Collaborating across teams to strengthen security posture through operational excellence and risk - based decision - making.
LP
Sr PM – Cybersecurity
LinkedIn Recruiter Post
Sr PM - Cybersecurity 12mo contract in Toronto. Must have 10+ years PM experience, cyber security background, and Canadian banking experience.
LP
Information Technology Security Engineer
LinkedIn Recruiter Post
IT Security Engineer for hybrid contract in Ottawa, ON. Requires experience with Gov Canada security assessment and CI/CD security scanning.
Expert in application cybersecurity analyzing web components and supporting secure development practices within a dynamic team. Collaborate on cloud application security based in Quebec, Canada.
Conseiller en gouvernance de la sécurité de l'information senior intervenant dans un projet client. Travail à Québec dans la ville du secteur public.
LP
Architects & Security Specialists
LinkedIn Recruiter Post
Seeking senior - level Architects & Security Specialists for remote contract roles across Canada. Focus on enterprise architecture, cloud design, security, and integration.