Application Security Specialist (web)

Duration: Permanent **No Contract - No C2C**

Region: Quebec,Canada (Fully remote)(Open to any other province but French is mandatory)

Salary: 100-125k$ cad

Auxo Recruitment is currently looking for an Application Security Specialist who will work closely with multiple development teams to ensure high standards for the development practices and be an ambassador of the security mindset at all stages of the SDLC. If you are super knowledgeable in cyber security and want to have an impact in a global HR tech company that develops great products you should apply now!

Responsibilities :

Identify code problems and offer guidance on how to improve the code.
Review new design to ensure it's secure.
Participate in the development of the AppSec roadmap.
Use your security expertise to support the product and development teams (security testing, authentication, encryption, design, logging, input validation).
Facilitate Threat Modelling and Risk assessments at the product level.
Build secure testing strategies for new app deployments.
Help with the internal growth of the bug bounty program and nurture it.
Act as the security champion.
Create and present security training for the development teams.
Lead meetings with product and development teams to discuss vulnerability remediation.
Help with the modernization of SAST/DAST tools.
SOC 2, GDPR, CCPA compliance.
Support for new products in incubation.

Qualifications:

At least 3 years of experience in cyber security working with a web development team.
Experience working on a SaaS product an asset.
Previous experience in software development.
Good understanding of web apps, WAF & web servers.
Knowledge of OWASP, SSDLC, and DevSecOps.
Experience in personal data protection (GDPR, SOC, CCPA).
Familiar with some tools in the following categories: CI/CD systems, containers, microservices, authentication systems, SAST, and DAST tools.
Excellent communication in French and English.

Auxo Recruitment

New Jobs

Cyber Security Specialist