Senior Application Security Engineer – Snyk, SAST, SCA & DAST
- Toronto, ON, Canada
Applications open in a new tab.
Job details
- Posting language
- English
- Posted
Original job description
Senior Application Security Engineer – Snyk, SAST, SCA & DAST
- 10 years of experience in Application Security, Cybersecurity, or DevSecOps.
- 5 years of hands-on experience with enterprise SAST, SCA, and DAST platforms.
- 3 years of implementation, administration, or engineering experience with Snyk.
- Demonstrated experience migrating application security tooling, preferably from Veracode to Snyk, in a large enterprise environment.
- Experience supporting regulated industries such as banking, financial services, insurance, healthcare, or government.
- Snyk product certifications or advanced Snyk platform training. CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials.
- Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.
More about this job
Responsibilities
The Senior Application Security Engineer at Astra North Infoteck Inc. will set up, run and improve the tools that scan company software for security flaws. The role includes moving those scanning tools from one vendor to another, mainly from Veracode to Snyk.
Requirements
Candidates need about 10 years in application security, cybersecurity or DevSecOps, including 5 years with enterprise SAST, SCA and DAST tools and 3 years working with Snyk. Experience in regulated industries and knowledge of secure development standards such as OWASP and NIST are expected, plus security certifications like CISSP or CEH.
Skills
- Snyk
- SAST
- SCA
- DAST
- Veracode
- Application security tooling
- Security tool migration
- DevSecOps
- Vulnerability management
- OWASP Top 10
- OWASP API Security Top 10
- CWE/SANS Top 25
- NIST SSDF
- NIST Cybersecurity Framework
- ISO 27001
- PCI DSS
- SOC 2
- Secure software development
- Security platform administration
- Security certification (CISSP, CSSLP, CEH, GWAPT)
- Azure Security Engineering
- AWS Security Specialty
- Regulatory compliance
Categories
- Technology
- Security & Safety
- Software
Keywords
- Snyk
- SAST
- SCA
- DAST
- Veracode
- application security
- AppSec
- DevSecOps
- cybersecurity
- static application security testing
- software composition analysis
- dynamic application security testing
- tool migration
- OWASP Top 10
- OWASP API Security Top 10
- NIST SSDF
- NIST Cybersecurity Framework
- CWE/SANS Top 25
- ISO 27001
- PCI DSS
Seniority
Senior
Licences and certifications
- CISSP
- CSSLP
- GWAPT
- GWEB
- CEH
- Azure Security Engineer
- AWS Security Specialty
Tools
- Snyk
- Veracode
Languages
- English