Senior Application Security Developer

Role overview

A Senior Application Security Developer builds and operates the tools and automation behind a vulnerability management program. The goal is to reduce the time and manual effort needed to identify, prioritize, and fix security issues across software and infrastructure, while helping development teams resolve complex findings at their source. The position is open to candidates across Canada except Quebec; people based near designated hubs are expected to work in the office two days per week.

Responsibilities

- Extend automation that brings vulnerability findings into a unified pipeline and supports remediation, including automated fix pull requests. - Integrate findings from dependency scanning, static analysis, secret scanning, penetration tests, vulnerability disclosures, and infrastructure-as-code or cloud posture tools. - Improve automated triage, risk prioritization, reachability analysis, severity assessment, and confidence grading, including through AI-assisted workflows. - Build data services and dashboards to track remediation progress, service-level agreement compliance, and dependency health. - Guide product development teams through security fixes and best practices, and directly address complex or high-risk issues in core codebases. - Contribute to incident response and ongoing improvements to vulnerability management processes.

Requirements

- Senior-level software development experience combined with deep application security and vulnerability management expertise. - Ability to design and maintain tooling that supports a vulnerability lifecycle from finding intake through remediation. - Experience partnering with software teams on root-cause analysis and practical vulnerability fixes. - Strong judgment in assessing risk, exploitability, and which findings are reachable and actionable.

Nice to have

- Experience with vulnerability management platforms, container security, infrastructure-as-code scanning, or cloud security posture tools. - Experience integrating AI or large language models into triage and security workflows.

Benefits and work setup

The role offers a hybrid schedule for employees near designated hubs. Listed benefits include health, dental, and vision coverage; flexible time off with an encouraged 20 days annually; counseling support; retirement savings contributions; and recognition milestones.