Software Engineer

Job Title: Software Engineer – Platform Security & Modernization

Location: Montreal, QC (Hybrid: 3 Days On-Site)

Employment Type: Contract / Full-Time

Role Overview

We are seeking a Software Engineer – Platform Security & Modernization to join a global enterprise technology team. In this role, you will be responsible for the security, modernization, and operational reliability of mission-critical information distribution and file transfer platforms.

You will play a central role in strengthening platform security posture, reducing technical debt, refactoring legacy applications, and driving resilience through automation, telemetry, and software engineering best practices.

🚨 Must-Have Skills (Non-Negotiable)

Candidates must possess all of the following core competencies to be considered for this role:

• Core Programming: Strong, hands-on programming expertise in Java (Java 17 or higher preferred), plus working proficiency in Python or JavaScript.
• Frameworks & Architecture: Proven hands-on experience building REST APIs using Spring Boot and applying solid object-oriented design principles.
• Security & Vulnerability Remediation: Demonstrated experience handling vulnerability remediation, third-party dependency updates (SCA), code analysis (SAST), and applying secure coding principles.
• Linux & Infrastructure: Solid working knowledge of Linux/Unix systems and shell scripting (Bash/Sh).
• Networking Protocols: Sound working knowledge of protocols including HTTPS, SSH/SFTP, SMTP, TLS, and TCP/IP.
• Databases: Practical experience writing and optimizing queries for relational databases (e.g., PostgreSQL, Oracle, or SQL Server).
• Modern Engineering Tooling: Hands-on experience with Git workflows, CI/CD pipeline configuration, automated testing, and container tools (Docker, Kubernetes, or OpenShift).

Key Responsibilities

Security & Platform Hygiene

• Vulnerability Management: Remediate application and infrastructure security flaws identified via penetration testing, risk assessments, and automated scanners.
• Framework Maintenance: Upgrade third-party libraries, application frameworks, and platform dependencies to fully supported and secure releases.
• Technical Debt Reduction: Refactor legacy codebases to improve maintainability, decrease operational risk, and enforce security-by-design standards.
• Cross-Team Alignment: Work directly with Cybersecurity and Infrastructure groups to convert security findings into executable remediation plans.