2 hours ago
Toronto, CanadaSenior
Responsibilities
- Conduct secure code reviews across Java, C#, PHP, Python, Perl, C/C++, and SQL.
- Analyze source code with automated and manual static analysis techniques to identify security vulnerabilities.
- Conduct penetration testing of web applications, mobile applications, networks, and infrastructure.
- Document findings, business impact, remediation guidance, and actionable recommendations.
- Train and assist developers with secure coding and vulnerability remediation.
- Develop secure coding and remediation training and research open-source secure code review tools.
- Collaborate with development teams and stakeholders on security risks, mitigation, and remediation strategies.
- Lead release-based testing and mitigation proposal review processes and provide on-call change-request approvals when needed.
- Mentor team members and stay current with cybersecurity threats, trends, and vulnerabilities.
Requirements
- 3–5 years of relevant experience, including at least 3 years in application security and at least 2 years in secure code review or static application security testing.
- University degree.
- Proven experience conducting penetration testing, vulnerability assessments, and secure code reviews.
- Experience identifying and providing remediation guidance for vulnerabilities in at least two of Java, C#, PHP, Python, Perl, C/C++, and SQL.
- Hands-on experience with commercial SAST tools such as Skyk, Checkmarx, AppScan Source, Veracode, Coverity, Fortify, and SonarQube.
- Experience using Burp Suite, Metasploit, Nmap, and ServiceNow.
- Understanding of web applications, mobile applications, databases, the OWASP Top 10, and the CWE Top 25.
- Strong analytical, problem-solving, written communication, and verbal communication skills.
- Ability to work independently and collaboratively and explain security risk and business impact to varied audiences.
- Information security certifications or accreditations are an asset; OSCP is a plus.
Benefits
- Base salary range of $81,600–$115,200 CAD.
- Health and well-being benefits, savings and retirement programs, paid time off, banking benefits, discounts, career development, and recognition programs.
- Training, onboarding, regular development and performance conversations, online learning, and mentoring programs.
- Accessibility accommodations are available throughout the interview process.
- Work location is Toronto, Ontario, Canada, with a 37.5-hour schedule.
