Find work in Canada.

484,409 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 3 months ago
PI
Software Engineer, Sportsbook Platform
PENN Interactive
Canada
- Full-time
Experience designing and evolving GraphQL schemas for product surfaces used by multiple clients (iOS, Android, Web)
Added 2 months ago
HH
Senior Quality Engineer
Hinge Health
Remote, Canada
- $90,400 to $135,600 CAD / year
- Full-time
- Remote
2+ years of experience testing mobile applications (e.g., React Native, native iOS, or native Android).
Added 4 months ago
H
Senior React Native Developer, Growth
HelloFresh
Toronto, Ontario
- Full-time
As a Mid-Level React Native Developer, you’ll join a cross-functional team building features that empower both customers and internal stakeholders. You’ll contribute to developing…
Added 4 months ago
C
Customer Service / Technical Support Rep (Hybrid)
Concentrix
Niagara Falls, Ontario
- Full-time
Maintain broad knowledge of client products, such as: smartphones, tablets, computers, and wearables. Familiarity with iOS and/or macOS, or comparable technology, is preferred
Added 2 months ago
E
Senior Software Engineer - Full Stack
Emburse
Toronto, ON
- Full-time
Added 2 months ago
Technical Systems Analyst 3
FortisBC
Surrey, BC · Trail, BC
Added 4 months ago
GN
Director of Conversion Rate Optimization (CRO)
Ground News
Remote, Canada
- Full-time
- Remote
End-to-End Funnel Ownership: Take complete accountability for the conversion rates, user journeys, and revenue outcomes across all digital touchpoints (Web, iOS, and Android).
Added 2 months ago
T
Senior Engineering Manager, Pro Feedback and Targeting
Thumbtack
Remote, Canada
- Full-time
- Remote
…responsible for coaching and managing engineers (backend, front end, iOS, Android) on a full-stack product…
Added 2 months ago
Modern Workplace Engineer - Intune & Endpoint Management
Scotiabank
Toronto, ON · Scarborough, ON
Design, deploy, and manage Microsoft Intune solutions for Windows, macOS, iOS, and Android devices.
Added 4 months ago
T
Senior Automation Engineer
Tubi
Toronto, Ontario
- Full-time
Your work will directly accelerate testing and release velocity while improving revenue-critical reliability across Tubi’s Android and IOS apps.
Added 4 months ago
J
Software Engineer, Products
Jetson
Kitchener, Ontario
- Full-time
Full-stack fluency. Comfort building across mobile (React Native or native iOS/Android) and backend systems. You don't need to be an expert in everything, but you can work across the stack…
Added 4 months ago
O
Application Security Engineer
Opendoor
Toronto, Ontario
- Full-time
…detection and secrets scanning and integrate findings into developer workflows where engineers already live (GitHub, Linear,…
Added 4 months ago
H
Senior Mobile Engineer I (Hybrid)
Homebase
Toronto, Ontario
- $130,000 to $160,000 CAD / year
- Full-time
If familiar with iOS Development: Expert in Swift, Swift UI, UIKit, and various common iOS frameworks
Added 2 months ago
A
Onboarding Manager, US
Appcharge
Sydney Indian Reserve No. 28A, NS · Sydney
- Full-time
Added 4 months ago
ZI
App Tester
ZenaTech Inc.
Toronto, Ontario
- $55,000 to $60,000 CAD / year
- Full-time
Experience testing mobile apps (iOS/Android) and/or web applications.
Added 1 month ago
Senior Software Engineer / Software Developer (React Native)
PlayStation Global
Waterloo, ON
We are seeking a Senior Software Engineer / Software Developer specializing in React Native and high-performance frontend development for mobile platforms. In this role, you will define the…
Added 1 month ago
PI
Senior Software Engineer, Bet Engine
PENN Interactive
Canada
- Full-time
2+ Years of experience designing and evolving GraphQL schemas for product surfaces used by multiple clients (iOS, Android, Web)
Added 5 months ago
HC
Co-op Engineer-Mobile AI
Huawei Canada
Markham, Ontario
- Full-time
Knowledge of mobile development such as Android and IOS is an assets
Added 4 months ago
A
Lead Software Engineer - Full Stack (Bangkok based, relocation provided)
Agoda
Vancouver, British Columbia
- Full-time
Experience in multiple front-end platforms including iOS, Android, Web, and API services
Added 3 months ago
S
Onsite IT Support Specialist – Healthcare
SIMNET
ON · Whitby Southeast, Ontario
- Full-time
Added 1 month ago
EC
Lead Product Designer
E+E Consulting
Montreal, QC
- Full-time
Product design. Own the iOS app end to end, from first open through the hundredth session.
Added 4 months ago
UC
Founding Role - Growth & Marketing (Commission-Based)
Up Coast Leaders
Remote, Canada
- Full-time
- Remote
Added 4 months ago
GN
Senior Product Lead
Ground News
Remote, Canada
- Full-time
- Remote
…for news literacy, with a fast-growing global audience across iOS, Android, and web. Our subscribers come to us to read past the headline and understand how stories are actually being…
Added 3 months ago
IC
Junior Game System Designer (Mobile Game)
IGG.com Canada
Vancouver, BC
- Full-time
…successful partnerships with platforms including Facebook, iOS, Google Play, Amazon, and Kongregate. Today, IGG operates studios across China, the Philippines, Singapore, the United States,…
Added 3 months ago
UI Engineer (Web), Apple Services Engineering, Apps
Apple
Vancouver, BC
…Store Connect web platform, a crucial service of the Apple Developer Program. We are responsible for providing app developers tools to manage, build, test, and publish apps to the App…

Opendoor

Application Security Engineer

Toronto, ON, Canada

Full-time

Apply About employer

Applications open in a new tab.

Job details

Job type: Full-time
Posting language: English
Posted: Jun 18, 2026

Original job description

About Opendoor

At Opendoor our mission is to tilt the world in favor of homeowners and those who aim to become one. Homeownership matters. It's how people build wealth, stability, and community. It's how families put down roots, how neighborhoods strengthen, how the future gets built. We're building the modern system of homeownership giving people the freedom to buy and sell on their own terms. We’ve built an end-to-end online experience that has already helped thousands of people and we’re just getting started.

About The Role

Our Security Engineering team builds intelligent systems that protect Opendoor and our customers while enabling unprecedented engineering velocity. We apply software engineering and AI to solve security problems across product, infrastructure, and operations by building guardrails where they matter, not gates where they don't.

As our Application Security Engineer, you'll own how we find, prioritize, and drive down application-layer risk across the consumer flows that put cash offers in homeowners’ hands, the GraphQL APIs that power our products, and the AI agents and vibe-coded tools our engineers ship every week. The job is to make it safe to build fast, not to slow things down.

What You'll Do

Define, build and operate Opendoor’s application vulnerability identification capability - the tooling, triage workflow and remediation techniques across our consumer products, internal admin tools and GraphQL API powering home acquisition, resale, mortgage, title and escrow.
Assess, rationalize and own our AppSec tooling stack - static and dynamic security testing, software supply chain risk detection and secrets scanning and integrate findings into developer workflows where engineers already live (GitHub, Linear, Slack).
Own and mature our HackerOne program: tightening the triage workflow, improving signal to noise on incoming reports, strengthening researcher relationships and closing the loop with engineering teams so root causes get addressed quickly.
Lead threat modeling and security design reviews for new services, APIs, and mobile features. Turn the patterns you see into rules, lint checks, and CI guardrails so the next team doesn't make the same mistake.
Build AI agents and automated workflows that triage vulnerability reports, validate exploit reproductions, and draft remediation pull requests, replacing manual security review with high-signal automation.
Partner with engineering teams to harden authentication, authorization, and input validation across our codebase and production services, including the GraphQL gateway (Apollo) and our Kubernetes workloads - while driving a shift-left strategy that catches vulnerabilities before they ship.
Build Opendoor’s offensive security capability. Scope and run internal security testing, red team exercises and adversarial analysis of our highest-risk flows ensuring findings directly harden detection and response.
Set the bar for what "secure by default" looks like for AI-maximalist engineering, including vibe-coded apps, MCP servers, and agent-driven workflows that touch production data.
Build Opendoor’s security culture by establishing secure design standards, embedding into engineering team rituals and developing a strong security mindset - creating a foundation for engineers to think like attackers without slowing down.

Tech Stack

Languages: Go, Python, TypeScript, Ruby, Terraform
Cloud: AWS, GCP, Azure, Kubernetes, Apollo GraphQL
AppSec Tooling: GitHub Advanced Security (CodeQL, Dependabot, secret scanning),

Semgrep, HackerOne, Burp Suite, Cloudflare WAF

AI Tooling: Claude, OpenAI, various agent frameworks, MCP - used heavily for vulnerability triage, exploit verification, and remediation drafting

What You'll Need

Deep conviction that AI and automation should eliminate manual work and increase the team's impact, and a track record to prove it. You’ve built agentic systems that replaced reactive security work, not just configured off-the-shelf tools.
Comfort operating with high autonomy in ambiguous environments. You’ve defined what “good” looks like in a domain where no playbook existed, you’re energized by that, not unsettled by it.
Business enablement security mindset. You measure success by business impact and informed risk-taking, not by tickets opened or pen test reports filed.
5+ years of application security or software engineering experience with a security focus, with strong skills in at least one of Python, Go, TypeScript, or Ruby, and the ability to read and write code across the others.
Hands-on expertise across the security risk detection toolchain with real deployment experience using GitHub Advanced Security, Semgrep, or equivalent.
Strong grasp of common application and API vulnerability classes including GraphQL, REST, and gRPC security pitfalls - broken authorization, mass assignment, introspection exposure, insecure direct object references.
Practical threat modeling skills. You can take an architecture diagram and a 30-minute conversation and walk out with the three things that actually matter.
Experience with cloud and container security on AWS and Kubernetes, including identity and access management, secrets management, and continuous integration / continuous deployment pipeline security.
Humility and genuine curiosity. You're as excited to learn from product engineers and enable their work as you are to break things.

Bonus Points

Offensive security experience including pentesting, API security, or mobile security, and/or red team operations.
Experience running a bug bounty or coordinated disclosure program at scale.
Mobile application security review experience (iOS and Android).
Experience securing AI and machine learning pipelines, agent frameworks, or MCP-style integrations.
OSCP, OSWE, or similar offensive certifications.

Location

This role is based in our downtown Toronto office, in-person four days per week (Monday, Tuesday, Thursday, Friday). Candidates must be based within commuting distance of the office.

Apply About employer

More about this job

Responsibilities

As an Application Security Engineer, you will define and operate Opendoor’s application vulnerability identification capability and lead threat modeling and security design reviews. You will also build AI agents and automated workflows to enhance security processes and partner with engineering teams to improve security across the codebase.

Requirements

Candidates should have 5+ years of application security or software engineering experience with a focus on security, and strong skills in at least one programming language such as Python, Go, TypeScript, or Ruby. A deep understanding of application and API vulnerabilities, along with practical threat modeling skills, is essential.

Skills

Application Security
Software Engineering
Python
Go
TypeScript
Ruby
Threat Modeling
Cloud Security
Kubernetes
GitHub Advanced Security
Semgrep
Vulnerability Management
Automation
AI
Security Testing
Incident Response

Visa sponsorship

Not detected in the job text

Keywords

Application Security
Software Engineering
Python
Go
TypeScript
Ruby
Terraform
AWS
GCP
Azure
Kubernetes
Apollo GraphQL
GitHub Advanced Security
Semgrep
HackerOne
Burp Suite
Cloudflare WAF
AI
Automation
Vulnerability Management
Threat Modeling
Security Testing
Incident Response
Mobile Security
Pentesting
Red Team Operations
Bug Bounty
Continuous Integration
Continuous Deployment
Identity Management

Report this job