Connexion Inscription gratuite
Postuler

Publié il y a 2 mois

Senior Application Security Engineer (SCA/SAST)

@ Trimble

Toutes ses offres

Télétravail au Canada

TélétravailTemps plein5+ ans d’expérience
Postuler
SIGNAUX

En bref

Trimble is hiring a Senior Application Security Engineer for a remote role in Canada to lead its SCA and SAST strategy across global engineering teams. The work covers developer-first security tooling, threat modeling, architectural reviews and mentoring, with 5+ years of AppSec experience expected.

Responsabilités :

  • Act as global SME for SCA and SAST
  • Optimize developer-first security tooling
  • Embed security into the SDLC
  • Build automated security guardrails in CI/CD
  • Conduct threat modeling and architectural reviews

Résumé des exigences :

  • 5+ years in AppSec
  • Enterprise SCA and SAST implementation experience
  • Ability to read and remediate code in Java, C#, Python or Go
  • Hands-on CI/CD pipeline experience
  • Strong stakeholder communication
  • Bachelor's degree or equivalent practical experience

Outils et compétences

GitHub ActionsJenkinsAzure DevOpsGitLab CI
Source et dates

Type de source non vérifié · eightfold

Date publiée par l’employeur
2026-09-20
Première détection par notre source
2026-10-14
Mise à jour du dossier source
2026-10-14

Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.

Détails du poste

NiveauSenior
DomaineTI
Expérience5 an(s) et plus
Heures par semaine40 (estimé)
Milieu de travailDomicile
PositionSurtout assis
Exigences physiquesphysique faible · ordinateur élevé
LanguesEnglish
FormationBaccalauréat (exigé)
Domaines d’étudesComputer Science, Information Security

Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.

Postuler
ChampValeur
Offres sur Jobsy9
Description

Senior Application Security Engineer (SCA/SAST)

Scale Security. Empower Engineers. Shape the Future.

Location: Canada-Remote


The Mission: At Trimble, we aren't just building software; we’re transforming the way the world works. We are looking for a Senior Application Security Engineer who is more than a technical expert—you are a strategist and a catalyst for secure innovation. You will lead the charge in open-source security (SCA) and static analysis (SAST) across a massive global footprint, ensuring that security is a seamless part of the developer experience.



Why This Role?

  • Global Influence: You won't just be "fixing bugs." You will be the architect of a global security strategy that impacts 99% of our engineering teams.
  • Strategic Autonomy: Lead the vision for our SCA and SAST roadmaps. You have the seat at the table to decide how we evolve.
  • Innovation at Scale: Work across diverse tech stacks—from .NET and Java to Go and Python—integrating security directly into the heartbeat of our CI/CD pipelines.


How You’ll Make an Impact

Strategic Leadership

  • Act as the global SME for SCA and SAST, turning complex security requirements into scalable, automated solutions.
  • Optimize our security tooling to be "developer-first," slashing false positives and focusing engineering energy on what truly matters.
  • Shape the organizational approach to open-source security and license compliance.

Engineering Excellence

  • Embed security into the DNA of the SDLC by collaborating with architects and product owners worldwide.
  • Automate everything. You’ll build the "guardrails" that allow our developers to move fast without breaking things.
  • Mentor the next generation of security talent and lead through influence across cross-functional teams.

Vision & Advisory

  • Stay ahead of the curve. You’ll evaluate emerging security tech and proactively keep Trimble at the cutting edge.
  • Conduct threat modeling and architectural reviews to kill vulnerabilities before they are ever coded.


The Profile We’re Looking For

  • The Architect: 5+ years in AppSec with a deep, battle-tested mastery of SCA and SAST implementation at an enterprise level.
  • The Polyglot: You speak the language of developers. Whether it’s Java, C#, Python, or Go, you can read the code and provide real remediation paths.
  • The Integrator: You live in the pipeline. You have hands-on experience with GitHub Actions, Jenkins, Azure DevOps, or GitLab CI.
  • The Communicator: You can translate "security risk" into "business value" for stakeholders and "clear action" for engineers.
  • Education: Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent practical experience.

How to Apply: Please submit an online application for this position by clicking on the ‘Apply Now’ button located in this posting.

Join a Values-Driven Team: Belong, Grow, Innovate.

At Trimble, our core values of Belong, Grow, and Innovate aren't just words—they're the foundation of our culture. We foster an environment where you are seen, heard, and valued (Belong); where you have an opportunity to build a career and drive our collective growth (Grow); and where your innovative ideas shape the future (Innovate). We believe in empowering local teams to create impactful strategies, ensuring our global vision resonates with every individual. Become part of a team where your contributions truly matter.

Candidate Privacy Notices by Country

If you need assistance or would like to request an accommodation in connection with the application process, please contact [email protected].

Emplois semblables

  • Application Security Engineer

    Toronto, ON
    Temps plein

    TSX Inc.

    3+ ansCandidates need 3+ years of application security engineering, penetration testing and secure code review experience. They must know OWASP Top 10 and CWE Top 25, secure development practices, cloud and microservices security, and tools such as Burp Suite and SAST/DAST scanners.

    Burp Suite Professional, SQLmap, Wireshark, SAST tools, DAST tools, CSPM tools

  • Senior Application Security Engineer

    Richmond Hill, ON
    Temps plein

    Paymentus: Paymentus® (NYSE: PAY) is the leading provider of real-time, cloud-based billing, payment, and customer engagement solutions.

    6+ ansCandidates need 6+ years of hands-on software or security engineering experience, strong coding skills in Java, NodeJS, Python or Golang, and deep knowledge of application, API and LLM security. A bachelor's degree in a technical field or equivalent practical experience is also required.

    SAST, DAST, SCA, Kubernetes, Cloudflare, Fastly

  • Senior Application Security Engineer

    Télétravail au Canada
    TélétravailTemps plein

    Accelerant

    5+ ansCandidates need five or more years in application security, product security or DevSecOps, with strong knowledge of web and API security and the OWASP Top 10. Experience with vulnerability scanning tools, CI/CD security, WAF management, AWS and Kubernetes, and Python scripting is needed.

    Snyk, Qualys, Trivy, Dependabot, GitHub Advanced Security, AWS

    Senior Application Security Engineer

    Télétravail au Canada
    TélétravailTemps plein

    Accelerant

    5+ ansCandidates need 5+ years in application security, product security or DevSecOps, with strong knowledge of web and API security and the OWASP Top 10. Experience with vulnerability scanning tools, CI/CD security and cloud security on AWS and Kubernetes is expected, plus Python scripting skills.

    Snyk, Qualys, Trivy, Dependabot, GitHub Advanced Security, WAF

  • Senior Application Security Engineer

    Toronto, ON
    TélétravailTemps plein

    BioRender

    Candidates need strong software engineering skills in Node.js and React, with Python a plus, and hands-on web application security and secure coding experience. They should have SAST/DAST and CI/CD integration experience, AWS and Terraform security skills, threat modeling, and working knowledge of cryptography, PKI and TLS.

    AWS, Terraform, Cloudflare, HackerOne, SAST tools, DAST tools

  • Senior Application Security Engineer

    Vancouver, BC
    130k–150k $/anHybrideTemps plein

    Spring Financial Inc.: Spring Financial is a leading financial technology company that provides all Canadians with simplified money solutions to help build credit, save…

    5+ ans2+ gestionSpring Financial needs 5+ years in application or security engineering, including 2+ years leading security initiatives. Candidates need deep knowledge of web and cloud security, the OWASP Top 10, threat modeling, CI/CD security integration, and automated security testing tools.

    Snyk, GitHub Advanced Security, Burp Suite, Semgrep, Checkov, AWS

  • Application Security Engineer

    Télétravail au Canada
    TélétravailTemps plein

    Working knowledge of common vulnerability classes (OWASP Top 10) and secure SDLC practices; Basic scripting ability (Python preferred) for automating repetitive tasks; Strong attention to detail and ability to manage a…

    Regulatory compliance, Documentation, Python, Attention to detail, CI/CD

Lieux et modes de travail

Lieux

Tout le CanadaTélétravail · Hybride · Sur place · Sur le terrain

Astuce : ajoutez le télétravail pour élargir la recherche.

Exclure des lieux

Mode de travail

Offres de cette entreprise dans les résultats

Voici les offres de cette entreprise chargées dans votre recherche. Elle peut avoir d’autres postes ouverts.