Responsibilities
- Support end users of application security testing tools and manage tickets through a ticketing platform.
- Prioritize and triage SCA scan results and communicate recommendations to application teams.
- Serve as a point of contact connecting application development and security teams.
- Drive application security practices and improve enterprise security posture.
- Educate developers, security consultants, and stakeholders about application security and open-source vulnerabilities.
- Integrate application security tools and processes into enterprise development workflows and pipelines.
- Participate in and lead application security assessments and testing workflow design.
- Troubleshoot tool configurations, scanning issues, security issues, and functional application issues.
- Design and develop secure RESTful APIs and maintainable data-processing code.
- Participate in code reviews, system design discussions, architectural decisions, and the full software development lifecycle.
- Document code and technical security considerations.
- Research emerging application security threats, techniques, tools, and trends.
- Collaborate with senior developers, security consultants, and cross-functional teams while developing application security expertise.
Requirements
- At least 2 years of professional experience developing and consuming REST APIs and applications.
- Familiarity with or interest in application security best practices, secure coding, SCA tools, dependency management, and open-source security.
- Strong proficiency in at least one of Python, Java, JavaScript, or .NET.
- Understanding of HTTP protocols, API design patterns, REST principles, relational databases, SQL, software design patterns, and SOLID principles.
- Hands-on experience with CI/CD tools and pipelines, plus understanding of DevOps and DevSecOps approaches.
- Experience with threat modeling and risk assessment activities and knowledge of OWASP, SANS, or similar security frameworks.
- Understanding of Scrum or Kanban and experience working in collaborative, cross-functional teams.
- Strong problem-solving, attention to detail, communication, documentation, and stakeholder-management skills.
- Preferred qualifications include testing frameworks and TDD, NoSQL databases, message queues, SAST/DAST, penetration testing, cloud platforms, Docker, Kubernetes, SonarQube, monitoring and logging tools, caching technologies, scalable architecture, distributed systems, and open-source contributions.
- Preferred experience includes using ChatGPT, OpenAI, or Claude to enhance productivity, automate workflows, and generate insights.
Benefits
- Comprehensive total rewards program with bonuses and flexible benefits.
- Competitive compensation and stock opportunities.
- Leadership coaching and development support.
- World-class training in financial services and application security.
- Flexible work/life balance options.
- Hybrid work environment in Toronto.
- Full-time, regular employment with a 37.5-hour work week.
Tech Stack
Categories
About RBC
Royal Bank of Canada is a global financial institution with a purpose-driven, principles-led approach to delivering leading performance. Our success comes from the 94,000+ employees who leverage their imaginations and insights to bring our vision, values and strategy to life so we can help our clients thrive and communities prosper. As Canada's biggest bank and one of the largest in the world, based on market capitalization, we have a diversified business model with a focus on innovation and providing exceptional experiences to our more than 17 million clients in Canada, the U.S. and 27 other countries. Learn more at rbc.com. We are proud to support a broad range of community initiatives through donations, community investments and employee volunteer activities. See how at www.rbc.com/community-social-impact. http://rbc.com/legalstuff. La Banque Royale du Canada est une institution financière mondiale définie par sa raison d'être, guidée par des principes et orientée vers l'excellence en matière de rendement. Notre succès est attribuable aux quelque 94 000+ employés qui mettent à profit leur créativité et leur savoir faire pour concrétiser notre vision, nos valeurs et notre stratégie afin que nous puissions contribuer à la prospérité de nos clients et au dynamisme des collectivités. Selon la capitalisation boursière, nous sommes la plus importante banque du Canada et l'une des plus grandes banques du monde. Nous avons adopté un modèle d'affaires diversifié axé sur l'innovation et l'offre d'expériences exceptionnelles à nos plus de 17 millions de clients au Canada, aux États Unis et dans 27 autres pays. Pour en savoir plus, visitez le site rbc.com/francais Nous sommes fiers d'appuyer une grande diversité d'initiatives communautaires par des dons, des investissements dans la collectivité et le travail bénévole de nos employés. Pour de plus amples renseignements, visitez le site www.rbc.com/collectivite-impact-social. https://www.rbc.com/conditions-dutilisation/