We are seeking a dedicated and experienced Security Software Developer with a strong emphasis on vulnerability identification and remediation. The ideal candidate will be an expert in analyzing software for security weaknesses, enjoys software development, and remains active in development endeavors at all times. They will be responsible for rectifying vulnerabilities to ensure the security and resilience of our software systems.

The Role:

Vulnerability Analysis:
Conduct thorough reviews of software components to detect security vulnerabilities
Assess third party software libraries and recommend suitable upgrade paths when necessary
Investigate and analyze known vulnerabilities within our software. Identify, compare, and evaluate resolution options, making informed recommendations for remediation
Remediation: Develop, test, and implement patches or solutions to rectify identified vulnerabilities.
Collaboration: Work closely with the Application Security team, Architecture team, DevOps and Infrastructure teams, and other engineering teams to ensure that security fixes are implemented without compromising the functionality or performance of the system.
Security Testing: Use a range of security tools and methodologies to test software for vulnerabilities, including penetration testing, and static code analysis.
Documentation: Maintain detailed documentation of identified vulnerabilities, the underlying causes, and the implemented fixes.
Stay Updated: Continually update knowledge of the latest security threats, vulnerabilities, and mitigation techniques.
Training: Educate software development teams on best practices for vulnerability prevention and remediation.
Feedback Loop: Provide feedback to the software development process to integrate security considerations from the initial stages.

Basic Qualifications

Bachelor’s Degree in Computer Science/related field or equivalent work experience
5+ years of experience in software development
2+ years of application security development
Proficient in Java, with practical experience in developing applications using Vue.js, Angular, JSF 2 and Primefaces. Demonstrated experience with Hibernate and Java Persistence API (JPA) for database integration.
Strong skills in SQL for database management and queries. Experience in developing and integrating RESTful APIs. Proven experience writing Unit and Integration tests. Proficient in using GIT for version control.
Experience in deploying applications both manually and through automated deployment pipelines.

Proven Qualifications

Active passion for software development and staying engaged in coding and development tasks Ability to meet tight deadlines
Detail-oriented with a strong commitment to quality and excellence
Extensive and deep technical knowledge of front-end UIs through to back-end systems
Strong software design and implementation knowledge, strong familiarity with web protocols, strong knowledge of architecture, and well-versed in application security and infrastructure security
Familiar with security best practices and knowledge of common and emerging security threats
Able to make application security risk-based prioritization decisions, analyze business risk, and make complex business/risk trade-off recommendations and decisions
Good team player with the ability to lead security initiatives
Great communication skills to explain complex security topics in simple language and easy to understand concepts

Extras You Might Offer As Tiebreakers

Application Security Certifications : GIAC Web Application Defender (GWEB), GIAC Secure Software Programmer (GSSP), Certified Secure Software Lifecycle Professional (CSSLP), Secure Software Practitioner (SSP), Certified Application Security Engineer (CASE)

The Work Environment

Our location is downtown Toronto in a small office environment
Work may be in-office, remote or hybrid, collaborating with other team members in-personal and digitally during regular business hours
Some work outside of normal business hours may be required on occasion due to time-constrained activities or collaborating with remote teams

Xideral Canada

New Jobs

Security Engineer