Product Security Specialist

Role overview

This position focuses on product security for a portfolio of connected software products, combining hands-on code-level vulnerability analysis with architectural review and automation. The specialist will partner with development, security operations, and global stakeholders to embed secure practices throughout the product lifecycle in a fast-changing environment.

Responsibilities

- Run static, dynamic, and dependency scans on existing, new, and proposed products, supplemented by manual code review and security-focused architecture assessments. - Trace source code across multiple code bases (including C#, .NET, Java, JavaScript/TypeScript/HTML, Swift, Kotlin, Python, C, and firmware where applicable) to validate scanner findings and suggest developer-level remediations. - Communicate risk assessments clearly to both engineering audiences and non-technical management. - Write and maintain Bash and Python scripts that package scan inputs, automate scanner execution, and integrate results with CI pipelines and cloud-based storage and reporting. - Contribute to secure coding standards and help develop secure coding training for current and future developers. - Produce technical assessment reports and vulnerability descriptions, and support secure architecture design and threat modeling for product teams. - Conduct vulnerability assessments, penetration testing, and code reviews, providing actionable recommendations to improve product security posture.

Requirements

- Demonstrated experience performing security reviews across diverse code bases and product types. - Deep technical proficiency in multiple programming languages spanning application, mobile, web, and embedded firmware contexts. - Strong analytical and problem-solving skills with meticulous attention to detail. - Excellent verbal and written communication skills, including the ability to explain risk to non-technical stakeholders. - Comfort working in a fast-paced environment with shifting priorities and collaborating across distributed teams. - Hands-on scripting ability in Bash and Python to support scanner automation and CI integration.

Benefits and work setup

- Hybrid working model combining in-office and remote time, with cloud-based collaboration and asynchronous workflows supported. - Hiring range listed at CAD $85,500–$105,600 for this role, with additional perks, benefits, and equity components potentially available depending on location and experience.