3 days ago
Remote, CanadaSenior
Responsibilities
- Own the execution, expansion, and optimization of enterprise DAST, IAST, API Security, and Runtime Security solutions.
- Establish API discovery, continuous security posture management, runtime controls, and security initiatives for AI/LLM implementations.
- Correlate DAST, IAST, SAST, SCA, and runtime telemetry to improve risk prioritization and reduce security noise.
- Integrate dynamic security automation into CI/CD pipelines alongside SAST, SCA, container, and infrastructure-as-code security tooling.
- Advise engineering, DevOps, and product teams on runtime protection across diverse technology stacks and cloud environments.
- Secure APIs and applications using REST, GraphQL, gRPC, API gateways, RASP, eBPF monitoring, and WAF/WAAP approaches.
- Develop custom automation scripts and review source code across multiple programming languages.
Requirements
- 6+ years of dedicated experience in Application Security, Product Security, or Software Security Engineering in complex enterprise environments.
- Hands-on mastery of enterprise DAST and IAST platforms such as Burp Suite Enterprise, Rapid7, Veracode DAST, Contrast Security, or HCL AppScan.
- Deep understanding of API security testing, API gateways, and runtime defense models.
- Experience securing applications written in Java, Python, Go, Node.js, C#/.NET, and C++.
- Experience automating security scans within CI/CD workflows and cloud environments including AWS, Azure, and GCP.
- Understanding of CVSS v3/v4, EPSS, and OWASP Top 10 vulnerability and risk-prioritization frameworks.
- Experience securing AI-enabled applications, LLM wrappers, and APIs against OWASP LLM Top 10 threats is a bonus.
- Familiarity with SAST, SCA, Container Security, and Infrastructure-as-Code scanning is a bonus.
- Software engineering experience with Python, Go, and Bash automation and multi-language source-code review is a bonus.
- Certifications such as OSCP, OSWE, GWAPT, CISSP, AWS Certified Security Specialty, or CKS are a bonus.
Benefits
- Remote position based in Canada.
- Travel requirement of 0–10%.
- Work on purpose-driven projects intended to improve productivity, safety, sustainability, and real-world outcomes.
- Collaborative and supportive culture centered on belonging, growth, innovation, ownership, and entrepreneurial initiative.
Categories
About Trimble
Trimble is a global technology company that connects the physical and digital worlds, transforming the ways work gets done. With relentless innovation in precise positioning, modeling and data analytics, Trimble enables essential industries including construction, geospatial and transportation. Whether it's helping customers build and maintain infrastructure, design and construct buildings, optimize global supply chains or map the world, Trimble is at the forefront, driving productivity and progress. For more information about Trimble (Nasdaq: TRMB), visit: www.trimble.com.