Application Security, Senior Specialist
Interac Corp1 day ago
Toronto, CanadaSenior
Responsibilities
- Embed secure development lifecycle controls, secure coding practices, and security frameworks across application development.
- Conduct secure design reviews, threat modeling, architecture assessments, code reviews, application security assessments, and vulnerability assessments.
- Triage, prioritize, track, and validate remediation of vulnerabilities across web, mobile, and backend systems.
- Maintain and optimize SAST, SCA, DAST, secrets scanning, and container security capabilities.
- Integrate security tooling into CI/CD pipelines and improve security automation and developer experience.
- Assess application-level risks and support enterprise risk reporting, audits, documentation, and regulatory compliance.
- Advise engineering, product, and cloud teams on application security, secure APIs, microservices, and cloud-native patterns.
- Deliver security training, workshops, and secure coding sessions while communicating risks to technical and non-technical stakeholders.
Requirements
- At least 5 years of experience in application security, software security engineering, or related roles in fintech, SaaS, or cloud-native environments.
- Strong understanding of modern application architectures, including microservices, APIs, containers, and serverless systems.
- Expertise in DevSecOps practices and secure software development lifecycle frameworks.
- Hands-on experience with SAST, SCA, DAST, secrets scanning, and CI/CD security tooling.
- Proficiency in at least one programming language, such as Java, Python, JavaScript, or Go, and familiarity with secure coding practices.
- Experience with threat modeling, code reviews, vulnerability assessments, and penetration-testing support.
- Knowledge of cloud security principles and at least one of AWS, Azure, or GCP.
- Familiarity with OWASP Top 10, CWE, NIST, PCI DSS, SOC 2, and other security frameworks.
- Strong communication skills and the ability to influence without authority.
- Cybersecurity certifications such as CISSP, CSSLP, CCSP, or OSCP are listed as additional qualifications.
- Eligibility to work full-time for Interac Corp. in Canada.
Benefits
- Hiring range of $85,000–$105,000 plus eligibility for a short-term incentive plan.
- Generous vacation and wellness days.
- Comprehensive employer-paid benefits coverage.
- Employer-funded RRSP program.
- Flexible hybrid work model.
- Free confidential 24/7 employee and family assistance program.
- Pregnancy and parental leave top-up.
- Charitable donation matching with United Way.
Categories
About Interac Corp
Interac Corp. operates Canada’s national debit and real-time money transfer network, providing Interac Debit, e-Transfer, and digital identity services to banks, merchants, governments, and consumers. A privately held company founded in 1984 and headquartered in Toronto, it connects nearly 300 financial institutions and handles millions of transactions daily across in-store and online channels. Interac earns network and transaction fees for secure payment and authentication services used across the Canadian economy.