Senior Security Engineer - App Sec

Role overview Help engineering teams build and operate software securely through practical application security leadership. This hands-on role combines security advice and architecture review with code changes, vulnerability remediation, automation, and cloud security work. The goal is to make security part of everyday development while helping teams deliver at pace.

Responsibilities - Manage vulnerability findings across engineering, driving remediation to completion and meeting agreed timelines. - Review application code and system designs, identify risks early, and provide clear, actionable fixes. - Write code alongside developers to harden applications and resolve security issues at their source. - Lead responses to critical third-party dependency and software supply chain vulnerabilities. - Build tools and automation that improve security detection, triage, and remediation. - Identify cloud risks in AWS and Terraform-managed infrastructure, lead threat modeling, and advise teams on emerging application and AI security concerns.

Requirements - Experience in application security, with the ability to work directly in software codebases. - Skills in secure code review, architecture review, threat modeling, and vulnerability remediation. - Ability to collaborate with developers on practical fixes, including changes to code and infrastructure. - Familiarity with cloud security, particularly AWS environments and infrastructure managed with Terraform. - Ability to create or improve security automation and communicate actionable guidance to engineering teams. - Interest in tracking evolving threats and helping engineers adopt secure coding practices.

Benefits and work setup - Remote-first work; location eligibility depends on the role. Technical applicants based in Canada must reside in Ontario.