Principal Application Security Architect
- Waterloo, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Posting language
- English
- Posted
Original job description
AI-First. Future-Driven. Human-Centered.
At OpenText, AI is at the heart of everything we do - powering innovation, transforming work, and empowering digital knowledge workers. We are hiring talent AI can't replace to help us shape the future of information management. Join us.
Job: Principal Application Security Architect
Location: Richmond Hill, ON, Canada (office-based)
The opportunity:
The successful candidate will work as part of a small team of subject-matter experts, providing security expertise to software development teams producing world class enterprise information management applications. In a time of increasing interconnectivity and rising expectations of rapid content delivery, security is a paramount concern.
Your Impact:
In this role you will focus on continually improving the Secure Software Development Lifecycle and evangelizing the importance of security to more than 4000 software engineers globally. You will also support a team responsible for locating security vulnerabilities and preventing them as early as possible in the development process. You will be expected to demonstrate their technical knowledge and help OpenText produce software that exceeds the security requirements of customers worldwide.
What the role offers:
- Security of web, cloud-based and AI agentic applications, databases, and a solid understanding of the technologies involved (such as JavaScript, Single Page Apps, Oauth, microservice architecture, etc)
- Application vulnerability types, exploit techniques, and mitigation approaches
- Sophisticated hacking techniques and tooling
- Advanced level software vulnerability scanning tools and detection methods including frontier AI scanning
- Integrating security checks into a CI-CD pipeline for cloud applications
- Design and mentoring on the creation and use of threat models
- Hands-on experience with COTS and open-source application security testing tools
- Securing and hardening virtualized and containerized deployment environments.
- Securing and hardening supply chains
- Software security standards, compliance processes, and common application security controls
What you need to succeed:
- 10+ years of web application security and vulnerability analysis
- Skilled at research and driven to be current and informed on cybersecurity trends
- Persuasive, clear, concise communicator, both verbally and written
- Highly organized with an ability to meet deadlines
- Self-motivated with a drive to succeed for yourself, your team and your company
- Excellent people skills with ability to network with product development teams, software architects, and dev/ops both in-person and remotely, instilling security into the development culture
- Background/understanding of agile software development life cycle
- Strong analytical / troubleshooting skills
- Commitment to quality and a thorough approach to work.
- Excellent writing and presentation skills
- A natural curiosity and detective skills
Education:
- Degree or commensurate experience in computer science, computer engineering, or information security related disciplines
- CISSP and/or CEH certified
One last thing:
OpenText is more than just a corporation, it's a global community where trust is foundational, the bar is raised, and outcomes are owned.
Join us on our mission to drive positive change through privacy, technology, and collaboration. At OpenText, we don't just have a culture; we have character. Choose us because you want to be part of a company that embraces innovation and empowers its employees to make a difference.
More about this job
Responsibilities
The role focuses on improving the Secure Software Development Lifecycle and evangelizing security practices to thousands of global software engineers. The architect will also lead efforts in locating and preventing security vulnerabilities early in the development process.
Requirements
Candidates need over 10 years of experience in web application security and vulnerability analysis, along with strong communication and analytical skills. A degree in computer science or a related field and CISSP or CEH certifications are required.
Skills
- Web Application Security
- Vulnerability Analysis
- Threat Modeling
- CI-CD Pipeline Integration
- Cloud Security
- Container Security
- Supply Chain Security
- JavaScript
- OAuth
- Microservice Architecture
- Penetration Testing
- Agile Methodology
- Software Hardening
- Security Auditing
- Technical Communication
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Software
- Technology
- Engineering
- Data & Analytics
Keywords
- Application Security
- AI Agentic Applications
- JavaScript
- Single Page Apps
- OAuth
- Microservices
- CI-CD
- Threat Models
- COTS
- Open-source Security Tools
- Virtualization
- Containerization
- Supply Chain Security
- CISSP
- CEH
- Agile
- Vulnerability Scanning
- Frontier AI Scanning
- Information Management
- Cybersecurity Trends