Hiring for Application Security Engineer role. Professionals suitable for the opportunity below may send their up-to-date resumes to Sriram.Parasa@brainhunter.com

Requirement Summary

Job Title/Role: Application Security Engineer
Job Location: Toronto, Ontario - M5T 2W5, Canada.
Job Duration: Initial contract of 6 months, with good possibilities of further extension.
Remote-Work Options: Hybrid Work Setting - 1 day/week in the office required.

***

Role/Job Summary: As an Application Security Engineer within our client's Information Security Department, you will be responsible for driving our Application Security initiatives. You will be both hands-on technical and influential, where you will be expected to directly communicate with cross-functional teams in Product, Development, DevOps, and Architecture.

The Application Security Engineer will be performing the major functions listed below. The position may require additional duties/responsibilities that may not be outlined below, and specific functions are subject to change.

Perform code reviews and penetration tests to discover and exploit vulnerabilities in Canada Life products (web/mobile/thick/API/cloud).
Participate in intake, scoping, and planning sessions.
Produce high-quality reports for both internal and external stakeholders.
Develop custom scripts or tools used for vulnerability scanning and identification.
Stay up-to-date on the current tools, technologies, and vulnerabilities to incorporate into testing practices.
Participate in vulnerability management operations, such as: retesting and reprioritizing vulnerabilities, reviewing code changes, and approving proposed remediations.
Collaborate with product and development teams to ensure the adoption of the Software Security Development Lifecycle (SSDLC) best practices across the entire application lifecycle (SAST, SCA, DAST, WAF, ASPM, etc.).

Qualifications / Key Skillset for this Role

A minimum of 5 years of work experience directly related to penetration testing, bug bounty hunting, exploit research and development, or application security testing
Excellent verbal and written communication skills (English). Ability to write clear and concise assessment reports that include findings, relevance, recommendations, etc.
Ability to read and write programming languages. Java, C#, JavaScript, Apex, and Python are highly valued, but others will help too.
Ability to penetration test Cloud Native Applications running on a major cloud provider infrastructure such as - Microsoft Azure, Amazon AWS, or Google Cloud Platform.
Microservice architecture expertise and best practices in securing APIs across multi-cloud environments
Demonstrated knowledge of security best practices, principles, and common frameworks, such as - OWASP, NIST, ISO, SOC, etc.
Relevant certifications, such as - OSCP, OSCE, GPEN, GWAPT, eWPT, eWPTX, eMAPT, etc. are considered an asset.

***

How to Apply: Please email me your up-to-date Resume/CV at Sriram.Parasa@brainhunter.com

We appreciate all the applicants' interest in working with us, however, only those candidates shortlisted for the next steps in the hiring process will be contacted.

Brainhunter is committed to providing an inclusive and accessible recruitment process. If you require accommodation at any point during the recruitment process, please reach out directly to the job poster or email aoda@brainhunter.com.

Thank you! Have a great day :)

Brainhunter Systems Ltd jobs

Application Security Engineer