Postuler

Publié il y a 2 mois

Senior Application Security Engineer – Snyk, SAST, SCA & DAST

@ Astra North Infoteck Inc.

Toronto, Ontario

10+ ans d’expérience
Postuler
SIGNAUX

En bref

Astra North Infoteck Inc. is hiring a Senior Application Security Engineer to lead application security tooling across the enterprise, with a focus on Snyk, SAST, SCA and DAST platforms. The work includes migrating security tooling from Veracode to Snyk in a large regulated environment. The posting asks for 10 years of application security, cybersecurity or DevSecOps experience; no schedule, pay or work arrangement is stated.

Responsabilités :

  • Implement, administer and engineer Snyk and other AppSec platforms
  • Migrate application security tooling, preferably from Veracode to Snyk
  • Operate enterprise SAST, SCA and DAST programs
  • Support regulated-industry security and compliance requirements

Résumé des exigences :

  • 10 years in Application Security, Cybersecurity or DevSecOps
  • 5 years hands-on with enterprise SAST, SCA and DAST platforms
  • 3 years implementing or administering Snyk
  • Experience in banking, financial services, insurance, healthcare or government
  • Certifications such as CISSP, CSSLP, GWAPT, GWEB, CEH or cloud security credentials

Outils et compétences

Source et dates

Type de source non vérifié · zoho

Date publiée par l’employeur
2026-09-03
Première détection par notre source
2026-10-11
Mise à jour du dossier source
2026-10-11

Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.

Détails du poste

NiveauSenior
DomaineTI
Expérience10 an(s) et plus
Milieu de travailBureau
PositionSurtout assis
Exigences physiquesphysique faible · ordinateur élevé
LanguesEnglish
Permis et certificationsCISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer

Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.

Astra North Infoteck Inc.

ChampValeur
Offres sur Jobsy425
Description

Senior Application Security Engineer – Snyk, SAST, SCA & DAST

• 10 years of experience in Application Security, Cybersecurity, or DevSecOps.

• 5 years of hands-on experience with enterprise SAST, SCA, and DAST platforms.

• 3 years of implementation, administration, or engineering experience with Snyk.

• Demonstrated experience migrating application security tooling, preferably from Veracode to Snyk, in a large enterprise environment.

• Experience supporting regulated industries such as banking, financial services, insurance, healthcare, or government.

• Snyk product certifications or advanced Snyk platform training. CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials.

• Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.


Emplois semblables

  • Application Security Engineer

    Toronto, ON
    Temps plein

    TSX Inc.

    3+ ansCandidates need 3+ years of application security engineering, penetration testing and secure code review experience. They must know OWASP Top 10 and CWE Top 25, secure development practices, cloud and microservices security, and tools such as Burp Suite and SAST/DAST scanners.

    Burp Suite Professional, SQLmap, Wireshark, SAST tools, DAST tools, CSPM tools

  • Senior Application Security Engineer

    Richmond Hill, ON
    Temps plein

    Paymentus: Paymentus® (NYSE: PAY) is the leading provider of real-time, cloud-based billing, payment, and customer engagement solutions.

    6+ ansCandidates need 6+ years of hands-on software or security engineering experience, strong coding skills in Java, NodeJS, Python or Golang, and deep knowledge of application, API and LLM security. A bachelor's degree in a technical field or equivalent practical experience is also required.

    SAST, DAST, SCA, Kubernetes, Cloudflare, Fastly

  • Senior Application Security Engineer

    Toronto, ON
    TélétravailTemps plein

    BioRender

    Candidates need strong software engineering skills in Node.js and React, with Python a plus, and hands-on web application security and secure coding experience. They should have SAST/DAST and CI/CD integration experience, AWS and Terraform security skills, threat modeling, and working knowledge of cryptography, PKI and TLS.

    AWS, Terraform, Cloudflare, HackerOne, SAST tools, DAST tools

  • Application Security Engineer - ADR

    Toronto, ON
    120k–203k $/anTemps plein

    SSB&T

    6+ ansCandidates need several years of software development and application security experience, including hands-on work with ADR, WAAP, or RASP tools and the OWASP Top 10. A bachelor's degree in IT, computer science or a related field with 6 years of relevant experience is preferred, and CISSP, GCIH, GWAPT or Security+ certifications are valued.

    Kubernetes, Terraform, Ansible, Azure, AWS

  • Senior Application Security Engineer

    Alberta +1
    TélétravailTemps plein

    Forward Financing: Forward Financing is a financial technology company based in Boston, Massachusetts with team members throughout the United States, Dominican…

    5+ ansCandidates need 5+ years in application or offensive security, hands-on pentesting and code review skills, and knowledge of AI/LLM attack surfaces. They should know Ruby, Python, TypeScript or Go and secure SDLC practices, and communicate risk clearly.

    SAST tools, AWS

  • Application Security Engineer

    Toronto, ON
    Sur placeTemps plein

    Opendoor

    Candidates need application security or software engineering experience with a security focus, strong coding skills in Python, Go, TypeScript or Ruby, and hands-on use of security scanning tools. They also need knowledge of API vulnerabilities, threat modeling, and cloud and Kubernetes security.

    GitHub Advanced Security, Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Apollo GraphQL

  • Application Security Engineer II

    Toronto, ON +1
    TélétravailTemps plein

    Thumbtack

    4+ ansCandidates need 4+ years of software engineering or application security experience, with practical skill in threat modeling, authentication, secrets management and OWASP Top 10 risks. Strong written and verbal communication and a growth mindset are also required.

    Security threats, Documentation, Incident response, Communication skills, Recruitment

  • Senior Application Security Engineer II

    Toronto, ON
    180k–220k $/anHybrideTemps plein

    Relay: Relay is a financial technology company and is not an FDIC-insured bank.

    5+ ansCandidates need 5 to 6 years of application security or penetration testing experience, production software shipping experience, deep knowledge of OWASP Top 10, and daily use of AI tools for development. Strong communication and developer mentorship skills are also expected.

    Datadog, Burp Suite, Claude Code, Cursor, TypeScript, Node.js

Lieux et modes de travail

Lieux

Tout le CanadaTélétravail · Hybride · Sur place · Sur le terrain

Astuce : ajoutez le télétravail pour élargir la recherche.

Exclure des lieux

Mode de travail

Offres de cette entreprise dans les résultats

Voici les offres de cette entreprise chargées dans votre recherche. Elle peut avoir d’autres postes ouverts.