6 days ago
Toronto, CanadaMid Level
Responsibilities
- Support end users of application security testing tools and manage tickets through a ticketing platform.
- Prioritize and triage SCA scan results and communicate recommendations to application teams.
- Serve as a primary liaison between security and development teams and educate stakeholders on application security and open-source vulnerabilities.
- Integrate application security processes and tools into enterprise development processes and pipelines.
- Participate in and lead application security assessments and develop testing workflows.
- Design and develop RESTful APIs and maintain secure, clean, and maintainable code for data processing and analysis.
- Troubleshoot tool configurations, scanning issues, applications, and security or functional defects.
- Collaborate on code reviews, system design, architectural decisions, documentation, and the full software development lifecycle.
- Research emerging application security threats, techniques, tools, and trends while contributing to security initiatives and continuous improvement.
Requirements
- At least 2 years of professional experience developing and consuming REST APIs and applications.
- Familiarity with application security best practices, secure coding, SCA tools, open-source security, and dependency management.
- Strong proficiency in at least one of Python, Java, JavaScript, or .NET.
- Understanding of HTTP, API design patterns, RESTful principles, relational databases, SQL, CI/CD pipelines, DevOps, and DevSecOps.
- Experience with threat modeling, risk assessment, data visualization or analytics tools, software design patterns, SOLID principles, and security frameworks such as OWASP or SANS.
- Understanding of agile methodology and strong problem-solving, collaboration, stakeholder-management, communication, and documentation skills.
- Preferred qualifications include testing frameworks, NoSQL databases, message queues, SAST/DAST, penetration testing, cloud platforms, Docker, Kubernetes, code-quality tools, monitoring and logging tools, caching technologies, scalable architecture, distributed systems, and open-source contributions.
- Preferred experience includes using ChatGPT, OpenAI, or Claude to improve productivity, automate workflows, or generate insights.
Benefits
- Competitive compensation, bonuses, flexible benefits, and stock opportunities.
- Coaching, professional development support, and world-class financial-services and application-security training.
- Flexible work/life balance options and a hybrid work environment.
- Full-time, regular employment in Toronto, Canada, with a stated schedule of 37.5 hours per week.
- Applications are accepted until October 30, 2026, at 11:59 PM on the preceding day.
Tech Stack
Amazon DynamoDBApache KafkaAWSAzureDatabricksDatadogDockerGitHub ActionsGitLab CI/CDGoogle Cloud PlatformJavaJavaScriptJenkinsKubernetesMongoDB.NETPythonRabbitMQRedisSnowflakeSonarQubeSQL
Categories
About RBC
Royal Bank of Canada (RBC) provides personal and commercial banking, payments, mortgages, investing, wealth management, insurance, and capital markets services to consumers, businesses, and institutions. The public company, headquartered in Toronto and founded in 1864, serves more than 17 million clients across Canada, the U.S., and other global markets. Revenue comes from interest income, fees, advisory, and trading across its diversified financial services businesses, and it is Canada’s largest bank by market capitalization.