Security Engineering Intern securing web apps and APIs at Super.com. Collaborating on DevSecOps tools and infrastructure projects for enhanced security.
Responsibilities
Participate in securing our product by catching application-level vulnerabilities in our web apps and APIs
Deploy and maintain DevSecOps tools such as Trivy, Bandit, or GitLeaks as part of our CI/CD pipelines
Implement least-privileged access policies for our secrets using Hashicorp Vault
Help investigate automated security alerts
Implement and maintain audit log pipelines from our internal tools and external vendors
Work with cutting edge infrastructure tools like AWS, Docker, Kubernetes, Terraform, and Helm
Implement identified fixes for software vulnerabilities
Build and integrate security tooling by writing basic Python scripts and applications
Requirements
You’ve seen how to take advantage of vulnerable web apps and APIs, and you would like to patch them
You’ve performed testing with some variation of security tooling (whether it be Burp Suite, Fiddler, Wireshark, etc.)
You have excellent knowledge of how networked services in the cloud work: VPC, IP, TCP, DNS, HTTP, etc.
You can use critical thinking skills to determine the impact and severity of the identified vulnerability to our organization
Développeur.euse sécurité cloud protégeant l’infrastructure de nesto, plateforme de financement hypothécaire canadienne. Conception de contrôles cloud, automatisation DevSecOps et réponse aux incidents.
Lead SCADA and cybersecurity engineer designing compliant electric - substation systems for GE Vernova. Coordinating multidisciplinary teams, vendors, testing, estimates, and project risk for decarbonized energy infrastructure.
Join RBC's Application Security Group to develop innovative security solutions, mentor junior staff, and collaborate across teams to enhance decision - making and automate tasks.
Lead SCADA and cybersecurity engineer designing compliant substation systems for GE Vernova. Guiding project teams, vendor designs, estimates, and acceptance testing for cleaner energy infrastructure.
Senior security advisor simulating cyber threats and strengthening defenses for Desjardins, North America's largest cooperative financial group. Leading complex initiatives, methodologies and cybersecurity risk mitigation.
SA&A Lead securing Azure applications and Microsoft platforms for PLATO, Canada’s Indigenous - owned software testing company. Leading authorization, control testing, evidence collection, and risk remediation.
Senior security advisor simulating and mitigating cyberthreats for Desjardins, North America's largest cooperative financial group. Leading offensive security methodologies, tools and strategic initiatives.
Staff Product Security Engineer building customer identity and authentication services for Affirm’s buy - now - pay - later platform. Designing secure, scalable CIAM backend systems and integrations.
Senior Security Engineer securing AWS infrastructure, production systems, and AI - driven workflows. Building guardrails, vulnerability remediation, monitoring, and incident response for a rapidly scaling platform.