Senior Security Engineer securing Squads’ stablecoin products, APIs, and infrastructure. Leading threat modeling, code review, vulnerability management, and secure development standards.
About the role
- Application Security Manager at Workleap embedding security in products and development workflows. You will write code, build tooling, and ensure secure software delivery.
Responsibilities
- Ensure security is embedded into CI/CD pipelines by delivering scalable, automated tooling and integrated security checks (SAST, DAST, SCA, secret scanning);
- Enable secure-by-default development by designing and implementing automated, policy-driven security review workflows;
- Establish robust security guardrails within AI-assisted development and agent workflows to reduce risk while maintaining developer velocity;
- Reduce risk exposure by proactively identifying, assessing, and driving remediation of application security vulnerabilities;
- Strengthen application security posture by leading threat modeling and security assessments for new features and architectural changes;
- Improve detection and response capabilities through the development of automation, tooling, and streamlined vulnerability management processes;
- Elevate cloud and application security by partnering with Infrastructure SecOps to harden Azure environments and deployment practices;
- Enhance external security feedback loops by contributing to and scaling the bug bounty program and vulnerability intake processes.
Requirements
- 8+ years of experience in application security, DevSecOps, or security-focused software development;
- Strong software engineering background combined with deep security expertise;
- Deep understanding of web application security principles, OWASP Top 10, and CWE Top 25;
- Hands-on experience performing secure code reviews in C#;
- Experience building and maintaining security automation in CI/CD pipelines (GitHub Actions preferred);
- Solid understanding of Azure cloud services, infrastructure security, and deployment patterns;
- Experience integrating SAST, DAST, SCA, and secret scanning tools into development workflows;
- Proficiency in scripting (Python, Bash) for automation and tooling;
- Extensive hands-on experience with AI-assisted and agentic development workflows, with deep expertise in their security implications;
- Familiarity with authentication protocols such as OIDC, SAML, and OAuth;
- Ability to clearly communicate security risks and trade-offs to both technical and non-technical stakeholders.
Benefits
- Health insurance
- Flexible working hours
- Professional development opportunities
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Azure Cloud Security Engineer strengthening Azure security, governance, and vulnerability remediation. Supporting ELITS Canada’s digital transformation clients through secure cloud implementation.
BMO banking associate providing bilingual credit and lending sales and service remotely in Quebec. Handling customer contacts, credit decisions, compliance, and suspicious - activity reporting.
Principal Information Security Engineer defining scalable security strategy, architecture, automation, cloud, identity, and AI controls. Helping Arctic Wolf protect organizations worldwide and end cyber risk.
Senior Cybersecurity Architect designing Zero Trust, IAM, SIEM, and cloud security solutions for Manulife’s financial services business. Supporting enterprise architecture, incident response, and security strategy.
Consultant cybersécurité hybride à Montréal chez I - TRACING, pure - player indépendant en sécurité informatique. Conception, déploiement et support de solutions IAM, réseau, systèmes et applications.
Desjardins property technician supporting fire prevention, building safety, management, and build - out projects. Providing technical support, process coordination, user training, and operational guidance.
Staff Security Engineer securing Shakepay’s bitcoin financial - services platform and customer data. Advancing AI - driven security, observability, threat modeling, and incident response for Canadian users.
Ingénieur sécurité principal protégeant l'infrastructure, les produits et les données de Shakepay, plateforme canadienne de services financiers bitcoin. Automatisation, IA, détection et réponse aux incidents.
Senior Application Security Researcher advancing AI - driven application security from prompt to production. Building detection systems and autonomous agentic penetration - testing capabilities.