13 hours ago
Vancouver, CanadaSenior
Responsibilities
- Partner with product and engineering teams across the software development lifecycle to build security into products and platforms.
- Conduct security architecture reviews, threat modeling, code reviews, design reviews, and roadmap reviews.
- Develop and maintain secure-by-default frameworks and libraries.
- Build automated security tooling, including static and dynamic analysis rules, custom SAST/DAST checks, and automated red-teaming capabilities.
- Identify and address AI-specific security risks, including prompt injection, insecure tool permissions, and agentic attack surfaces.
- Triage, investigate, and drive remediation of vulnerabilities from bug bounty programs, internal testing, and automated security tooling.
- Investigate product security incidents using logs and monitoring tools and support containment and resolution.
- Evaluate software supply chain security, dependency management, SCA tooling, and third-party risk in development pipelines.
- Develop and deliver secure coding and emerging-threat training for engineers.
- Collaborate with stakeholders on short-term and long-term risk management strategies.
Requirements
- 5+ years of experience in application security, product security, or software engineering with a security focus.
- Strong software engineering experience with Python, JavaScript/TypeScript, or Scala.
- Deep knowledge of the OWASP Top 10 and web application vulnerabilities such as XSS, CSRF, SSRF, and SQL injection.
- Familiarity with AI/ML security concepts, including LLM-specific risks, prompt injection, and agentic attack surfaces.
- Experience with SAST, DAST, software composition analysis, and vulnerability management tools.
- Experience performing security design reviews and threat modeling for complex applications.
- Strong communication and collaboration skills with technical and non-technical partners.
- Curiosity about AI tools and emerging technologies and willingness to learn and use them productively.
- Pragmatic, collaborative approach and passion for defending against real-world attacks.
Benefits
- Estimated base salary range of 176,000–200,000 CAD, excluding additional compensation components.
- Mental health, wellness, and fitness benefits.
- Career coaching and support.
- Inclusive family-building benefits.
- Long-term savings or retirement plans.
- In-office culinary options accommodating dietary preferences.
- Vancouver office-centric hybrid schedule, typically in office Monday, Tuesday, and Thursday, with work-from-home options on some Wednesdays and potentially Fridays depending on the work.
Tech Stack
Categories
About Asana
Asana builds a work management platform that helps teams plan, track, and coordinate projects and goals, with AI-assisted features and integrations. It sells subscription-based SaaS used across functions from marketing to engineering. Founded in 2008 and headquartered in San Francisco, Asana is publicly traded on the NYSE and used by more than 170,000 organizations, including Accenture and Amazon.