
Application & Product Security Principal
Global Relayabout 2 hours ago
Vancouver, Canada
Staff+
Responsibilities
- Lead DevSecOps initiatives for application security and compliance.
- Integrate security practices into the software development lifecycle.
- Conduct security sessions for development teams focusing on risks and vulnerabilities.
- Develop and deploy an automated security framework.
- Review and analyze vulnerability data to identify security risks.
- Mentor team members and provide training on security practices.
- Create security documentation and developer training materials.
- Select and manage scanning tools for security testing.
Requirements
- 8+ years of application security and operations experience.
- Expert knowledge of secure software development practices.
- Experience with OWASP, Mitre, NIST SP800-115, SAST, DAST, and SCA.
- Proficiency in scripting languages such as Python, Java, Bash, and PowerShell.
- Familiarity with CI/CD technologies and containerization tools.
- Ability to communicate effectively with technical and non-technical teams.
- Strong problem-solving skills and attention to detail.
Benefits
- Comprehensive extended health benefits program including virtual healthcare.
- Annual vacation days that increase with tenure.
- Paid sick days and maternity/parental enhancement program.
- Bonus and RRSP contribution matching program.
- Subsidized meal program for Vancouver-based employees.
Tech Stack
AnsibleBashDockerGitJavaJenkinsKubernetesOpenShiftPowerShellPuppetPython
Categories
DevOpsSecurity