Application Security Transformation Lead
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Snyk SME (Application Security Transformation Lead)
Full Time
Toronto, ON (Hybrid)
10+ years of experience in Application Security, Cybersecurity, or DevSecOps.
5+ years of hands-on experience with enterprise SAST, SCA, and DAST platforms.
3+ years of implementation, administration, or engineering experience with Snyk.
Demonstrated experience migrating application security tooling, preferably from Veracode to Snyk, in a large enterprise environment.
Experience supporting regulated industries such as banking, financial services, insurance, healthcare, or government. Snyk product certifications or advanced Snyk platform training.
CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials.
Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.Snyk product certifications or advanced Snyk platform training. CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials. Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.
More about this job
Responsibilities
Lead the transformation of enterprise application security tooling, including migration to Snyk, preferably from Veracode. Apply hands-on expertise with SAST, SCA, and DAST platforms while supporting security programs in regulated enterprise environments.
Requirements
Requires 10+ years of experience in application security, cybersecurity, or DevSecOps; 5+ years working hands-on with enterprise SAST, SCA, and DAST platforms; and 3+ years implementing, administering, or engineering with Snyk. The posting also cites experience migrating security tools in large enterprises, familiarity with regulated industries and security frameworks, and relevant Snyk training or security credentials.
Skills
- Application Security
- Cybersecurity
- DevSecOps
- Snyk
- SAST
- SCA
- DAST
- Security Tool Migration
- NIST SSDF
- NIST Cybersecurity Framework
- OWASP Top 10
- OWASP API Security Top 10
- CWE/SANS Top 25
- ISO 27001
- PCI DSS
- SOC 2
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Software
- Security & Safety
- Management & Leadership
Keywords
- Snyk
- Veracode
- Application Security
- Cybersecurity
- DevSecOps
- SAST
- SCA
- DAST
- Security Tool Migration
- Regulated Industries
- Banking
- Financial Services
- Insurance
- Healthcare
- Government
- NIST Secure Software Development Framework
- NIST Cybersecurity Framework
- OWASP Top 10
- OWASP API Security Top 10
- CWE/SANS Top 25
- ISO 27001
- PCI DSS
- SOC 2
- CISSP
- CSSLP
- GWAPT
- GWEB
- CEH
- Azure Security Engineer
- AWS Security Specialty