3 days ago
Toronto, Canada or Dallas, TX, USAMid Level / Senior
H1B sponsor
Base Salary
$106k - $159k/yr
Responsibilities
- Integrate, operate, and continuously improve SAST, SCA, secret-scanning, and DAST tools within the SDLC.
- Implement shift-left security practices and integrate security scans, policies, and quality gates into CI/CD pipelines.
- Conduct threat modeling, secure design reviews, and architecture reviews with application teams.
- Triage, validate, prioritize, and track security findings through remediation and closure.
- Provide developers with actionable vulnerability-remediation guidance and promote secure coding practices.
- Build and maintain Python and Terraform automation for application onboarding, policy enforcement, and security metrics reporting.
- Track and report application security posture, vulnerability trends, remediation timelines, and tool coverage.
- Educate developers on common vulnerability classes and advise stakeholders and management on security risks.
Requirements
- 4–5 years of work experience in Application Security or DevSecOps in a medium or large corporate environment.
- Bachelor’s degree in computer science, engineering, or a related field is preferred.
- Hands-on experience with SCA tools such as Apiiro, Nexus IQ, or Snyk.
- Hands-on experience with SAST tools such as SonarQube or Semgrep.
- Hands-on experience with secret scanning and DAST/API security tools such as Traceable or Burp Suite.
- Hands-on experience with threat modeling, GitHub Actions, and Terraform.
- Strong understanding of OWASP Top 10, OWASP API Security Top 10, OWASP ASVS, NIST, and CIS Benchmarks.
- Understanding of AI and LLM security risks including prompt injection, data leakage, and AI supply-chain risks.
- Working knowledge of injection, XSS, SSRF, broken access control, insecure deserialization, and their remediation in code.
- Working knowledge of securing applications built on public cloud services.
- Ability to collaborate with application teams and globally dispersed cross-functional teams.
Benefits
- US employees may enroll in health, life, disability, and voluntary insurance plans.
- Canada employees may enroll in healthcare, life, disability, and optional benefit plans.
- Retirement and savings plans are available, including Equinix contributions in the US and DCPP, RRSP, and TFSA options in Canada.
- Paid time off, vacation or personal time, and paid holidays are provided, subject to eligibility and plan terms.
- An Employee Assistance Program is available to all employees.
- The role is posted for Dallas, Texas, or Toronto, Canada; compensation varies by location.
About Equinix
Equinix is a public digital infrastructure company that operates a global platform of colocation and interconnection data centers for enterprises, cloud and network providers. It sells space, power, and connectivity, plus services such as Equinix Fabric, Network Edge, and Equinix Metal for hybrid multicloud and edge deployments. Founded in 1998 and headquartered in Redwood City, California, it is listed on NASDAQ (EQIX) and runs hundreds of IBX facilities across major metros worldwide.