Find work in Canada.

487,440 jobs across our Canadian network. How we count

Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 2 days ago
UE
Canada Impact+ Emerging Leader in AI-integrated Biomedical Devices
UVic Engineering and Computer Science
Victoria, BC
- Full-time
be a registered professional engineer in Canada, or be eligible to apply for registration with the Engineers and Geoscientists of British Columbia (details available at www.egbc.ca);
Added 3 days ago
S
Principal Research Scientist
ServiceNow
Montreal, QC
- Full-time
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could…
Added 3 days ago
Application Security Engineer
Opendoor
Toronto, ON
As our Application Security Engineer, you'll own how we find, prioritize, and drive down application-layer risk across the consumer flows that put cash offers in homeowners’ hands, the…
Added 4 days ago
S
AI Engineer
SandboxAQ
Canada
- Full-time
We’re looking for somebody with the curiosity of a researcher, the rigor of an engineer, and the creativity of a hacker. You will be part of a diverse team consisting of ML experts,…
Added 4 days ago
AI
AI CyberSecurity Specialist
Agility IT
Toronto, ON
- Contract
The ideal candidate combines the mindset of a security researcher, software engineer, and emerging-technology evaluator, with a strong interest in building practical cybersecurity…
Added 5 days ago
G
Cybersecurity Specialist- Research and Scientist
Galent
Toronto, ON
- Contract
The ideal candidate combines the mindset of a security researcher, software engineer, and emerging-technology evaluator and is comfortable turning new ideas into measurable, working…
Added 5 days ago
TI
CyberSecurity Specialist
Themesoft Inc.
Toronto, ON · North York, ON
- Contract
The ideal candidate combines the mindset of a security researcher, software engineer, and emerging-technology evaluator and is comfortable turning new ideas into measurable, working…
Added 9 days ago
RR
Head of Artificial Intelligence
Red Rover Recruitment
Toronto, ON
- $120,000 to $200,000 CAD / year
- Full-time
Added 10 days ago
AI
AI CyberSecurity Specialist
Agility IT
Toronto, ON
- Contract
The ideal candidate combines the mindset of a security researcher, software engineer, and emerging-technology evaluator. You will explore new cybersecurity capabilities, build agentic AI…
Added 10 days ago
D
Cloud Security Lead
Deloitte
Canada
- Full-time
The ideal candidate is a strong researcher and problem solver, comfortable working under broad direction, capable of independently driving work to completion, and skilled at clearly…
Added 12 days ago
S
Principal Research Scientist
ServiceNow
Montreal, QC
- Full-time
It all started when engineer Fred Luddy wrote code that automated a tedious task for his coworker, Phyllis. She cried tears of joy. That moment inspired Fred to build a company that could…
Added 12 days ago
P
Senior Software Engineer, Test
Providius
Hamilton, ON
- $100,000 to $130,000 CAD / year
- Full-time
Providius is looking for an experienced Senior Software Engineer, Test to help us build stronger, faster, and more reliable ways of validating complex software systems.
Added 12 days ago
P
Senior Software Engineer, Test
Providius
Hamilton, ON
- Full-time
Providius is looking for an experienced Senior Software Engineer, Test to help us build stronger, faster, and more reliable ways of validating complex software systems.
Added 17 days ago
G
CyberSecurity Specialist- Agentic AI
Galent
Toronto, ON · North York, ON
- Contract
Ideal Candidate: Security Researcher + Software Engineer with experience in academic/market research and emerging cybersecurity technology evaluation.
Added 18 days ago
Principal Offensive Security
Varicent
Toronto, ON
We're looking for a Principal Offensive Security engineer to be the senior technical authority for our offensive security practice across applications, cloud environments, enterprise…
Added 24 days ago
Développeur.se principal.e de l’infrastructure / Lead Infrastructure Developer
Electronic Arts
Montreal, QC · Vancouver, BC
As Lead Infrastructure Engineer, you will own the GPU fleet our researchers train on including capacity, scheduling, diagnostics, and support. You will set technical direction for GPU…
Added 1 month ago
Senior Project Manager
National Research Council Canada
Ottawa, ON
…traditional project management role. Individual projects are led by researcher and engineer Project Managers from across the NRC; the Senior Project Manager will work across those projects…
Added 1 month ago
JG
Cybersecurity Specialist
J&M Group
Toronto, ON
- Full-time
The ideal candidate combines the mindset of a security researcher, software engineer, and emerging-technology evaluator and is comfortable turning new ideas into measurable, working…
Added 1 month ago
W
Senior / Staff ML Ops Engineer
Waabi
Toronto, ON
- $184,000 to $272,000 USD / year
- Full-time
…cost per experiment. When a job fails at 3am on node 47, the researcher should find out why without…
Added 1 month ago
JG
Security Researcher Engineer
J&M Group
Toronto, ON
- Full-time
Hands-on Technical Security Research Engineer to research, prototype, evaluate, and operationalize emerging cybersecurity capabilities, especially AI/GenAI and Agentic AI security.
Added 1 month ago
AI
Security Research Engineer - AI Security, Agentic AI & Emerging Cybersecurity
Astra-North Infoteck Inc. ~ Conquering today’s challenges, achieving tomorrow’s vision!
Toronto, ON
- Full-time
The ideal candidate combines the mindset of a security researcher, software engineer, and emerging-technology evaluator and is comfortable turning new ideas into measurable, working…
Added 1 month ago
TC
Security Researcher Engineer
Tata Consultancy Services
Toronto, ON
- $100,000 to $120,000 CAD / year
- Full-time
The ideal candidate combines the mindset of a security researcher, software engineer, and emerging-technology evaluator and is comfortable turning new ideas into measurable, working…
Added 1 month ago
NR
Senior Project Manager
National Research Council Canada / Conseil national de recherches Canada
Ottawa, ON
- Full-time
…traditional project management role. Individual projects are led by researcher and engineer Project Managers from across the NRC; the Senior Project Manager will work across those projects…
Added 1 month ago
EA
Développeur.se principal.e de l’infrastructure / Lead Infrastructure Engineer
Electronic Arts (EA)
Montreal, QC
- Full-time
As Lead Infrastructure Engineer, you will own the GPU fleet our researchers train on including capacity, scheduling, diagnostics, and support. You will set technical direction for GPU…
Added 1 month ago
EA
Lead Infrastructure Engineer
Electronic Arts (EA)
Vancouver, BC
- Full-time
As Lead Infrastructure Engineer, you will own the GPU fleet our researchers train on including capacity, scheduling, diagnostics, and support. You will set technical direction for GPU…

Opendoor

Application Security Engineer

Toronto, ON, Canada

Apply About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Jun 17, 2026

Original job description

About The Role

Our Security Engineering team builds intelligent systems that protect Opendoor and our customers while enabling unprecedented engineering velocity. We apply software engineering and AI to solve security problems across product, infrastructure, and operations by building guardrails where they matter, not gates where they don't.

As our Application Security Engineer, you'll own how we find, prioritize, and drive down application-layer risk across the consumer flows that put cash offers in homeowners’ hands, the GraphQL APIs that power our products, and the AI agents and vibe-coded tools our engineers ship every week. The job is to make it safe to build fast, not to slow things down.

What You'll Do

Define, build and operate Opendoor’s application vulnerability identification capability - the tooling, triage workflow and remediation techniques across our consumer products, internal admin tools and GraphQL API powering home acquisition, resale, mortgage, title and escrow.

Assess, rationalize and own our AppSec tooling stack - static and dynamic security testing, software supply chain risk detection and secrets scanning and integrate findings into developer workflows where engineers already live (GitHub, Linear, Slack).

Own and mature our HackerOne program: tightening the triage workflow, improving signal to noise on incoming reports, strengthening researcher relationships and closing the loop with engineering teams so root causes get addressed quickly.

Lead threat modeling and security design reviews for new services, APIs, and mobile features. Turn the patterns you see into rules, lint checks, and CI guardrails so the next team doesn't make the same mistake.

Build AI agents and automated workflows that triage vulnerability reports, validate exploit reproductions, and draft remediation pull requests, replacing manual security review with high-signal automation.

Partner with engineering teams to harden authentication, authorization, and input validation across our codebase and production services, including the GraphQL gateway (Apollo) and our Kubernetes workloads - while driving a shift-left strategy that catches vulnerabilities before they ship.

Build Opendoor’s offensive security capability. Scope and run internal security testing, red team exercises and adversarial analysis of our highest-risk flows ensuring findings directly harden detection and response.

Set the bar for what "secure by default" looks like for AI-maximalist engineering, including vibe-coded apps, MCP servers, and agent-driven workflows that touch production data.

Build Opendoor’s security culture by establishing secure design standards, embedding into engineering team rituals and developing a strong security mindset - creating a foundation for engineers to think like attackers without slowing down.

Tech Stack

Languages: Go, Python, TypeScript, Ruby, Terraform

Cloud: AWS, GCP, Azure, Kubernetes, Apollo GraphQL

AppSec Tooling: GitHub Advanced Security (CodeQL, Dependabot, secret scanning), Semgrep, HackerOne, Burp Suite, Cloudflare WAF

AI Tooling: Claude, OpenAI, various agent frameworks, MCP - used heavily for vulnerability triage, exploit verification, and remediation drafting

What You'll Need

Deep conviction that AI and automation should eliminate manual work and increase the team's impact, and a track record to prove it. You’ve built agentic systems that replaced reactive security work, not just configured off-the-shelf tools.

Comfort operating with high autonomy in ambiguous environments. You’ve defined what “good” looks like in a domain where no playbook existed, you’re energized by that, not unsettled by it.

Business enablement security mindset. You measure success by business impact and informed risk-taking, not by tickets opened or pen test reports filed.

Application security or software engineering experience with a security focus, with strong skills in at least one of Python, Go, TypeScript, or Ruby, and the ability to read and write code across the others.

Hands-on expertise across the security risk detection toolchain with real deployment experience using GitHub Advanced Security, Semgrep, or equivalent.

Strong grasp of common application and API vulnerability classes including GraphQL, REST, and gRPC security pitfalls - broken authorization, mass assignment, introspection exposure, insecure direct object references.

Practical threat modeling skills. You can take an architecture diagram and a 30-minute conversation and walk out with the three things that actually matter.

Experience with cloud and container security on AWS and Kubernetes, including identity and access management, secrets management, and continuous integration / continuous deployment pipeline security.

Humility and genuine curiosity. You're as excited to learn from product engineers and enable their work as you are to break things.

Bonus Points

Offensive security experience including pentesting, API security, or mobile security, and/or red team operations.

Experience running a bug bounty or coordinated disclosure program at scale.

Mobile application security review experience (iOS and Android).

Experience securing AI and machine learning pipelines, agent frameworks, or MCP-style integrations.

OSCP, OSWE, or similar offensive certifications.

Location

We're looking for team members who are enthusiastic about an in-office culture - people who want to build alongside others and not from a distance. This role is based in one of our talent hubs where we welcome everyone 5 days a week with the requirement of Mo, Tu, Th, Fri.

Apply About employer

More about this job

Responsibilities

The Application Security Engineer will define and operate vulnerability identification capabilities while building AI-driven workflows to automate security triage and remediation. They will also lead threat modeling, security design reviews, and partner with engineering teams to harden production services and infrastructure.

Requirements

Candidates must have strong software engineering experience with a security focus and proficiency in Python, Go, TypeScript, or Ruby. The role requires hands-on expertise in application security tooling, cloud/container security, and a proven track record of using automation to solve security challenges.

Skills

Application Security
Software Engineering
Python
Go
TypeScript
Ruby
GraphQL
Kubernetes
AWS
GCP
Threat Modeling
Vulnerability Management
CI/CD
Offensive Security
AI Automation
Cloud Security

Visa sponsorship

Not detected in the job text

Keywords

Application Security
Security Engineering
Go
Python
TypeScript
Ruby
Terraform
AWS
GCP
Kubernetes
Apollo GraphQL
GitHub Advanced Security
CodeQL
Dependabot
Semgrep
HackerOne
Burp Suite
Cloudflare WAF
AI Agents
Threat Modeling
Red Teaming
Offensive Security
API Security
Shift-left
Vulnerability Triage
Identity and Access Management
CI/CD Pipeline Security
OSCP
OSWE
Mobile Security

Report this job