Staff/Lead Application Security Engineer
Beacon Software2 months ago
Toronto, Canada +2 moreStaff+
Responsibilities
- Set the strategy and technical roadmap for product security across Beacon and its portfolio companies.
- Lead threat modeling and security architecture reviews and define standards for authentication, authorization, encryption, and tenant isolation.
- Own product security reviews of acquired codebases and cloud environments, including baseline posture, material risk, and remediation paths.
- Perform secure code reviews focused on authorization and business logic flaws and manage external penetration testing partners.
- Assess AI features, including agent architectures, model and tool access, delegated credentials, and reachable data.
- Own vulnerability management from intake and prioritization through remediation SLAs and reporting.
- Define and integrate SAST, DAST, SCA, and secrets scanning into CI/CD across the portfolio and build automation for fix pull requests, dependency remediation, and findings routing.
- Write secure coding standards and training, support product security incident response, and partner with GRC on audit and customer security review evidence.
Requirements
- Expert knowledge of web and API security, identity and access design including authentication, authorization, RBAC, and ABAC, and applied cryptography.
- Experience securing applications in cloud environments and containerized workloads.
- Ability to ship production code and author security fixes, not only specify them.
- Ability to set architecture and standards across many codebases.
- Track record of driving security work to completion in engineering organizations outside the reporting line.
- Experience using AI in work and judgment about when to build security tooling versus buy it.
Categories
About Beacon Software
Beacon Software acquires, operates, and grows vertical market software businesses serving Main Street sectors, offering permanent ownership rather than buy-to-flip exits and shared product, AI, and go-to-market resources. It builds an AI-native platform and provides in-house engineering to modernize portfolio products while keeping each company’s brand and customers intact. Founded in 2024 and headquartered in Toronto, the company is privately held and focuses on niche operational software across the real economy.