1 day ago
Toronto, CanadaSenior
Responsibilities
- Design, build, and implement tools for AI security testing, penetration testing, red teaming, and continuous vulnerability assessment.
- Develop mock and test AI applications to evaluate internal and third-party AI security solutions.
- Identify and assess security risks in AI-enabled applications and workflows.
- Develop security requirements, standards, and best practices for securely building and deploying AI applications.
- Evaluate third-party vendors, open-source tools, libraries, and AI technologies from a security perspective.
- Integrate security testing and evaluation capabilities into CI/CD pipelines and development workflows.
- Build scalable security tooling and automation for use across teams and environments.
- Troubleshoot production applications and solve complex engineering and security problems.
- Collaborate with engineering teams, security professionals, customers, vendors, and business stakeholders.
- Create technical documentation for tools, features, assessments, testing methodologies, and findings.
Requirements
- 5+ years of software development experience building and supporting production applications.
- Strong hands-on programming experience with Python.
- Experience with RESTful APIs and structured data formats including JSON, XML, CSV, and HTML.
- Experience with CI/CD pipelines and modern software development practices.
- Strong Linux and scripting skills.
- Experience troubleshooting and supporting production applications.
- Understanding of application security concepts including authentication, authorization, encryption, secrets management, and secure development practices.
- Experience with Microsoft Azure, including foundational cloud networking and security concepts.
- Understanding of RAG, LLM-based applications, and agentic systems.
- Ability to make sound engineering design decisions, solve technical problems, and improve systems and tooling.
- Strong communication and collaboration skills.
- Preferred: experience with penetration testing, application security testing, security red teaming, or automated security testing in CI/CD pipelines.
- Preferred: hands-on experience assessing Generative AI or LLM-based application security.
- Preferred: familiarity with prompt injection, data leakage, insecure tool usage, and adversarial testing.
- Preferred: security certification such as CISSP or equivalent.
Benefits
- Continuous learning, training, and access to industry certifications.
- Collaborative, flat, and entrepreneurial consulting culture.
- Opportunity to deliver technology solutions for Tier 1 financial institutions and shape digital financial services.
- The role is based in a financial-services and energy digital-transformation consulting environment.
About Capco
Capco is a global technology and management consultancy focused on financial services, helping banks, capital markets, insurance, and wealth firms with digital transformation, risk and compliance, and data/AI-enabled modernization. Founded in 1998 and headquartered in London, it operates as a Wipro company. Its business model centers on project-based consulting, managed services, and solution delivery across strategy, engineering, and platforms for regulated institutions.