Connexion Inscription gratuite
Postuler

Publié il y a 6 jours

Application Security Engineer

@ Lorven Technologies Inc.

Toutes ses offres

Canada

Contrat
Postuler
SIGNAUX

En bref

Lorven Technologies Inc. is hiring a contract Application Security Engineer to remediate application security findings hands-on, write fixes and open pull requests. The role also covers deploying and tuning SAST and SCA tools in CI/CD, triaging findings from SAST, SCA and pen tests, and reviewing designs for security. The posting requires availability during US business hours.

Responsabilités :

  • Remediate application security findings in code and open PRs
  • Deploy and tune SAST and SCA tools in CI/CD
  • Triage and prioritize SAST, SCA and pen test findings
  • Review PRs and designs for security issues

Résumé des exigences :

  • Python and Go software development background
  • Hands-on AppSec and vulnerability remediation experience
  • Direct experience operating SAST and SCA tools in CI/CD
  • Explains findings clearly to developers
  • Available during US business hours

Outils et compétences

SAST toolsSCA toolsCI/CD pipelines
Source et dates

Type de source non vérifié · apify-linkedin

Date publiée par l’employeur
2026-11-04
Première détection par notre source
2026-11-10
Mise à jour du dossier source
2026-11-10

Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.

Détails du poste

DomaineAssurance qualité
Déplacementsavion : aucun · route : aucun
Milieu de travailBureau
PositionSurtout assis
Exigences physiquesphysique faible · ordinateur élevé
LanguesEnglish

Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.

Postuler

Lorven Technologies Inc.

Toutes ses offres
ChampValeur
Offres sur Jobsy1
Description

Job description:

What they'll do:

  1. Remediate application security findings hands-on: read the code, write the fix, open the PR. This is a dev-facing role, not a ticket-filing role.
  2. Deploy, configure, and tune SAST and SCA tooling in our CI/CD pipelines and repos, including rule tuning and false positive cleanup.
  3. Triage findings from SAST, SCA, and pen tests, prioritize them, and drive them to closure with engineering teams.
  4. Review PRs and designs for security issues and help build secure coding guidance for developers.

What we need:

  1. Software development background in Python and Go. Must be comfortable writing production code and opening PRs.
  2. Hands-on AppSec experience, especially vulnerability remediation (OWASP Top 10, dependency vulns, secrets, auth/session issues).
  3. Direct experience deploying and operating SAST and SCA tools in CI/CD, not just consuming their output.
  4. Works well with developers and can explain findings in plain language.
  5. Available during US business hours.

Nice to have: healthcare or other regulated-industry experience.

Emplois semblables

  • Application Security Engineer

    Toronto, ON
    Temps plein

    TSX Inc.

    3+ ansCandidates need 3+ years of application security engineering, penetration testing and secure code review experience. They must know OWASP Top 10 and CWE Top 25, secure development practices, cloud and microservices security, and tools such as Burp Suite and SAST/DAST scanners.

    Burp Suite Professional, SQLmap, Wireshark, SAST tools, DAST tools, CSPM tools

  • Senior Application Security Engineer

    Richmond Hill, ON
    Temps plein

    Paymentus: Paymentus® (NYSE: PAY) is the leading provider of real-time, cloud-based billing, payment, and customer engagement solutions.

    6+ ansCandidates need 6+ years of hands-on software or security engineering experience, strong coding skills in Java, NodeJS, Python or Golang, and deep knowledge of application, API and LLM security. A bachelor's degree in a technical field or equivalent practical experience is also required.

    SAST, DAST, SCA, Kubernetes, Cloudflare, Fastly

  • Senior Application Security Engineer

    Télétravail au Canada
    TélétravailTemps plein

    Accelerant

    5+ ansCandidates need five or more years in application security, product security or DevSecOps, with strong knowledge of web and API security and the OWASP Top 10. Experience with vulnerability scanning tools, CI/CD security, WAF management, AWS and Kubernetes, and Python scripting is needed.

    Snyk, Qualys, Trivy, Dependabot, GitHub Advanced Security, AWS

    Senior Application Security Engineer

    Télétravail au Canada
    TélétravailTemps plein

    Accelerant

    5+ ansCandidates need 5+ years in application security, product security or DevSecOps, with strong knowledge of web and API security and the OWASP Top 10. Experience with vulnerability scanning tools, CI/CD security and cloud security on AWS and Kubernetes is expected, plus Python scripting skills.

    Snyk, Qualys, Trivy, Dependabot, GitHub Advanced Security, WAF

  • Senior Application Security Engineer

    Toronto, ON
    TélétravailTemps plein

    BioRender

    Candidates need strong software engineering skills in Node.js and React, with Python a plus, and hands-on web application security and secure coding experience. They should have SAST/DAST and CI/CD integration experience, AWS and Terraform security skills, threat modeling, and working knowledge of cryptography, PKI and TLS.

    AWS, Terraform, Cloudflare, HackerOne, SAST tools, DAST tools

  • Senior Application Security Engineer

    Vancouver, BC
    130k–150k $/anHybrideTemps plein

    Spring Financial Inc.: Spring Financial is a leading financial technology company that provides all Canadians with simplified money solutions to help build credit, save…

    5+ ans2+ gestionSpring Financial needs 5+ years in application or security engineering, including 2+ years leading security initiatives. Candidates need deep knowledge of web and cloud security, the OWASP Top 10, threat modeling, CI/CD security integration, and automated security testing tools.

    Snyk, GitHub Advanced Security, Burp Suite, Semgrep, Checkov, AWS

  • Application Security Engineer

    Télétravail au Canada
    TélétravailTemps plein

    Working knowledge of common vulnerability classes (OWASP Top 10) and secure SDLC practices; Basic scripting ability (Python preferred) for automating repetitive tasks; Strong attention to detail and ability to manage a…

    Regulatory compliance, Documentation, Python, Attention to detail, CI/CD

Lieux et modes de travail

Lieux

Tout le CanadaTélétravail · Hybride · Sur place · Sur le terrain

Astuce : ajoutez le télétravail pour élargir la recherche.

Exclure des lieux

Mode de travail

Offres de cette entreprise dans les résultats

Voici les offres de cette entreprise chargées dans votre recherche. Elle peut avoir d’autres postes ouverts.