Remote job
Senior Security Engineer
Job details
About this role
Role overview Own the dynamic and runtime security workstream within an enterprise application security program. The role spans a varied software portfolio, helping engineering teams discover and reduce application and API risks while strengthening security automation across cloud environments and AI-enabled services.
Responsibilities - Lead the rollout and ongoing improvement of dynamic and interactive application testing, API security, and runtime protection tools. - Improve API discovery, security posture monitoring, and runtime controls, including for AI and large language model implementations. - Correlate findings from multiple security tools and runtime signals to reduce noise and help teams prioritize actionable risks. - Integrate dynamic security checks into CI/CD pipelines alongside source code, dependency, container, and infrastructure scanning. - Advise product, engineering, and DevOps teams on practical runtime protections across technologies and cloud environments.
Requirements - At least six years in application, product, or software security in complex enterprise environments. - Hands-on experience with enterprise DAST and IAST platforms. - Strong knowledge of API security testing for REST, GraphQL, and gRPC, as well as gateways and runtime defense approaches such as RASP, eBPF monitoring, and WAF/WAAP. - Experience securing applications built in multiple languages and automating security scans in CI/CD and cloud environments such as AWS, Azure, or GCP. - Familiarity with vulnerability assessment and prioritization methods including CVSS, EPSS, and OWASP Top 10.
Nice to have - Experience securing AI-enabled applications, LLM integrations, and APIs against risks covered by the OWASP LLM Top 10. - Familiarity with SAST, software composition, container, and infrastructure-as-code security. - Ability to write automation in Python, Go, or Bash and review source code across languages. - Relevant security or cloud certifications.
Benefits and work setup - Remote role based in Canada, with 0–10% travel expected.