Find work in Canada.

484,333 jobs across our Canadian network. How we count

Jobs in Canada

Email me new jobs Save this search

Added 1 month ago
PC
Transformation Risk and Advisory, Senior Manager, JIRA, AI and Reporting Lead
Pwc Canada
Toronto, ON · Calgary, AB · Ottawa, ON · Vancouver, BC
- Full-time
We are seeking a full-time Senior Manager to join our Transformation Risk & Advisory team as a Jira & PMO Tooling Lead. You will shape and lead the tooling strategy that enables large…
Added 1 month ago
OT
Technical Architect
Open Text Corporation
Waterloo, ON
- Other
Configure and manage cloud-based proof-of-concept environments to support workshops and project validation phases.
Added 1 month ago
Bilingual Manager, IT Infrastructure (Paas)
CMHC - SCHL
Ottawa, ON · Montreal, QC
Join the Infrastructure and Operations Team, in the Bilingual Manager, IT Infrastructure (Paas) position. In this role, you will be accountable for the end-to-end operational health,…
Added 2 months ago
F
R2026-297 Senior Software Engineer
Flywheel
Toronto, ON
- Full-time
…career with real impact, endless growth opportunities and the support you need to be the best you can…
Added 2 months ago
U
Gestionnaire de développement de logiciels / Mgr. Software Development
UKG
Montreal, QC
- Full-time
Accompagner l'équipe dans l'adoption d'un modèle DevOps. Prendre en charge l'ensemble du processus, de la définition des exigences avec la gestion de produit à la conception, au…
Added 2 months ago
JI
Customer Support Manager | Gestionnaire du soutien à la clientèle
Jesta I.S.
Montreal, QC
- Full-time
We are looking for a Customer Support Manager to lead customer support operations across our Service Desk, Technical Support, and Application Support functions.
Added 3 months ago
Gestionnaire technique de compte | Technical Account Manager , Enterprise
Amazon
Montreal, QC
…gain the best value and service from AWS? At AWS Enterprise Support we’re looking for a Technical Account Manager (TAM) to support our customers’ creative and transformative spirit of…
Added 1 month ago
WI
Technical Success Manager
Work in Ottawa
Ottawa, ON
- Full-time
We are excited to partner with Snyk to attract top talent for a Technical Success Manager (Spanish Speaking).
Added 2 months ago
K
Manager, SAP Integration / BTP Lead
KPMG
Calgary, AB · Vancouver, BC · ON · Toronto, Ontario
- Full-time
Solid understanding of Git, CI/CD pipelines, and DevOps practices for integration lifecycle management. Clear understanding about SAP clean core principles and their application to…
Added 3 months ago
VA
Senior Business Analyst (Oracle)
Vancouver Airport Authority
Vancouver, BC
- Full-time
Provide business analysis, application, technical, and operational expertise for assigned enterprise systems, acting as the primary liaison between business stakeholders, vendors, and IT…
Added 1 month ago
RU
Manager, D365 CE & Power Platform Engineering
RSM US LLP
Toronto, ON
- Full-time
We are seeking a Manager, Power Platform, Dynamics 365 Customer Engagement (CE) & Modern Front-End Engineering to lead the design and delivery of enterprise solutions across Microsoft…
Added 2 months ago
M
API Architect
Moneris
Toronto, ON
- Full-time
…implementation of the API development life cycle and the central API support services. Collaborates with other technology teams to design, develop and implement software systems and data…
Added 2 months ago
H(
Sr. Cloud Platform Engineer
HOOPP (Healthcare of Ontario Pension Plan)
Toronto, ON · CA ON Toronto
- $103,000 to $153,000 CAD / year
- Full-time
Reporting to the Sr. Manager, Cloud Platform, the Sr. Cloud Platform Engineer will be responsible for designing, maintaining and supporting cloud infrastructure and operations for HOOPP’s…
Added 2 months ago
H(
Sr. Cloud Platform Engineer (Network and Cloud Operations)
HOOPP (Healthcare of Ontario Pension Plan)
Toronto, ON · CA ON Toronto
- $103,000 to $153,000 CAD / year
- Full-time
Reporting to the Sr. Manager, Cloud Platform, the Sr. Cloud Platform Engineer will be responsible for designing, maintaining and supporting cloud infrastructure and operations for HOOPP’s…
Added 2 months ago
JI
Senior MLOps Engineer | Ingénieur·e MLOps senior
Jesta I.S.
Montreal, QC
- Full-time
You will bridge data engineering, ML automation, infrastructure, observability, and application deployment to help build scalable, secure, multi-tenant AI infrastructure with a strong focus…
Added 2 months ago
AI
Project Manager
Architecture in Motion Inc.
Mississauga, ON
- Full-time
Coordinate with cross-functional teams including ITSM leads, technical architects, application support leads, and business analysts
Added 2 months ago
B
Senior Manager Data Engineering
BMO
Toronto, ON · SCC
- Full-time
…impact from day one – for yourself and our customers. We’ll support you with the tools and resources you need to reach new milestones, as you help our customers reach theirs. From in-depth…
Added 2 months ago
B
Principal Cloud Security Engineer
BMO
Toronto, ON · BMOPLACE
- Full-time
…sustained protection by embedding controls in operational and DevOps (CI/CD) practices with a focus on…
Added 1 month ago
Development Manager, Guidewire
CAA Club Group
Thornhill, ON
…Associates share in each other’s successes, drive change and support each other while cultivating a great working environment to deliver on what is best for our Members. CAA SCO Systems &…
Added 3 months ago
E
Manager, Software Engineering
Emburse
Toronto, ON
- Full-time
Experience working in a scrum and DevOps environment. Good understanding of agile application development lifecycle.
Added 2 months ago
M
Staff AI Engineer
Maple
Toronto, ON
- Full-time
Cloud & DevOps: Fully containerized, auto-scaling AWS infrastructure defined as code via Terraform and orchestr
Added 3 months ago
WC
Senior Manager, Quality Assurance Automation
Walmart Canada
Mississauga, ON
- Full-time
A DevOps orientation requires knowledge of operating systems, software maintenance tools, application monitoring tools, debugging tools, and design methodologies. This role defines metrics…
Added 2 months ago
PG
Manager Platform Security
Paymentus Group Inc
Richmond Hill, ON
- Full-time
The Manager of Platform Security is responsible for leading a team of security engineers focused on the security of the Paymentus SaaS platform, including web applications, RESTful APIs,…
Added 2 months ago
Manager, Enterprise Architecture
Agriculture Financial Services Corporation
Olds, AB · Ponoka, AB · Medicine Hat, AB · Lacombe, AB · Stettler, AB · Stony Plain, AB · Red Deer, AB · Drumheller, AB · Camrose, AB · Edmonton, AB · Grande Prairie, AB · Calgary, AB · Lethbridge, AB · AB
The Manager, Enterprise Architecture serves as the lead visionary and final architectural authority for AFSC, ensuring the digital ecosystem is resilient, integrated, and optimized to…
Added 3 months ago
P
Senior Application Security Engineer
Paymentus
Richmond Hill, ON
- $110,000 to $150,000 USD / year
- Full-time
This is a hands-on technical role reporting to the Manager of Platform Security. The Senior Application Security Engineer will perform secure design reviews, threat modeling, source code…

Paymentus

Senior Application Security Engineer

Richmond Hill, ON, Canada

$110,000 to $150,000 USD / year · Full-time

Apply About employer

Applications open in a new tab.

Job details

Pay: $110,000 to $150,000 USD / year
Job type: Full-time
Experience: 6+ years of experience in software engineering, application security, product security, platform security, security engineering, or a closely related technical role.
Posting language: English
Posted: Jul 20, 2026

Original job description

Summary/Objective

The Senior Application Security Engineer is responsible for helping secure the Paymentus SaaS platform by partnering directly with software engineering, product, cloud infrastructure, DevOps, and security teams to identify, assess, and remediate application security risks across web applications, RESTful APIs, microservices, cloud-native services, and AI-enabled application components.

This is a hands-on technical role reporting to the Manager of Platform Security. The Senior Application Security Engineer will perform secure design reviews, threat modeling, source code review, API security assessments, application security testing, vulnerability validation, and remediation guidance for applications and services that support Paymentus’ payment technology platform.

The successful candidate must have strong hands-on software development experience, deep knowledge of modern application security, and the ability to work effectively with engineering teams to improve security without unnecessarily slowing product delivery. This role requires practical expertise in SaaS application security, RESTful API security, cloud-native application patterns, secure coding, software supply chain risk, and emerging AI/LLM application security risks.

Supervisory Responsibility

This role does not have direct supervisory responsibility.

The Senior Application Security Engineer is expected to provide technical leadership, mentorship, and guidance to software engineers, security engineers, and other technical stakeholders. This includes helping engineering teams understand security risks, adopt secure coding practices, and remediate application security issues effectively.

Education and Experience

Bachelor’s Degree in Engineering, Computer Science, Software Engineering, Information Security, or a related technical field, or equivalent practical experience.
6+ years of experience in software engineering, application security, product security, platform security, security engineering, or a closely related technical role.
Extensive hands-on development experience in one or more of the following languages: Java, NodeJS, Python, Golang.
Strong understanding of modern SaaS application architecture, web applications, microservices, distributed systems, RESTful APIs, authentication, authorization, session management, secure data handling, and service-to-service communication.
Deep knowledge of application security vulnerabilities and secure remediation patterns.
Strong knowledge of API security risks, including broken object-level authorization, broken function-level authorization, excessive data exposure, mass assignment, unrestricted resource consumption, improper inventory management, and unsafe third-party API consumption.
Strong understanding of modern application security guidelines, including OWASP Top 10, OWASP API Security Top 10, and OWASP Top 10 for Large Language Model Applications.
Practical knowledge of AI and LLM application security risks, including prompt injection, insecure output handling, sensitive data exposure, insecure plugin/tool usage, model misuse, excessive agency, and AI supply chain concerns.
Hands-on experience performing secure code review, threat modeling, architecture review, vulnerability validation, and security testing.
Experience using and tuning application security tools such as SAST, DAST, SCA, container scanning, IaC scanning, secrets scanning, and API security testing tools.
Experience securing applications deployed in one or more public cloud environments, including AWS, GCP, or Azure.
Knowledge of Kubernetes, containerization, container registries, container image hardening, workload identity, secrets management, network policies, and runtime security concepts.
Knowledge of serverless application security, including function permissions, event validation, input handling, logging, dependency control, and abuse prevention.
Familiarity with application servers, web servers, and reverse proxy technologies such as Tomcat, JBoss, nginx, or similar platforms.
Familiarity with CDN, WAF, bot mitigation, rate limiting, and edge security controls using platforms such as Cloudflare and Fastly.
Experience working with CI/CD pipelines, source control systems, artifact repositories, build systems, infrastructure as code, and developer workflow automation.
Ability to analyze security findings, determine exploitability, identify root cause, and recommend practical remediation steps.
Ability to work independently, manage multiple priorities, and deliver high-quality results in a fast-paced engineering environment.
Strong written and verbal communication skills, including the ability to explain security issues clearly to technical and non-technical stakeholders.
Strong collaboration skills and the ability to build trusted working relationships with engineering, product, DevOps, cloud infrastructure, compliance, and security teams.

Preferred Qualifications

Experience working in fintech, payments, banking, financial services, or another highly regulated SaaS environment.
Experience with payment processing, cardholder data environments, tokenization, fraud controls, transaction platforms, or payment APIs.
Experience supporting PCI DSS, SOC 2, SOX technology controls, NIST CSF, ISO 27001, or similar security and compliance frameworks.
Experience with Spring Security, Java security libraries, OAuth 2.0, OIDC, SAML, JWT, mTLS, API gateways, and service-to-service authentication patterns.
Experience with Kubernetes admission controls, service mesh security, policy-as-code, runtime detection, and cloud workload protection platforms.
Experience building secure shared libraries, developer security tooling, reusable security controls, or paved-road security patterns.
Experience with bug bounty programs, red team engagements, penetration testing, or exploit development.
Relevant certifications such as CSSLP, CISSP, CCSP, GWAPT, GWEB, OSWE, AWS Security Specialty, Google Professional Cloud Security Engineer, Azure Security Engineer, CKS, CKAD, or equivalent practical experience.

EEO Statement

Paymentus is an equal opportunity employer. We enthusiastically accept our responsibility to make employment decisions without regard to race, religious creed, color, age, sex, sexual orientation, national origin, ancestry, citizenship status, religion, marital status, disability, military service or veteran status, genetic information, medical condition including medical characteristics, or any other classification protected by applicable federal, state, provincial, and local laws and ordinances. Our management is dedicated to ensuring the fulfillment of this policy with respect to hiring, placement, promotion, transfer, demotion, layoff, termination, recruitment advertising, pay, and other forms of compensation, training, and general treatment during employment.

Reasonable Accommodation

Paymentus recognizes and supports its obligation to endeavor to accommodate job applicants and employees with known physical or mental disabilities who are able to perform the essential functions of the position, with or without reasonable accommodation. Paymentus will endeavor to provide reasonable accommodations to otherwise qualified job applicants and employees with known physical or mental disabilities, unless doing so would impose an undue hardship on the Company or pose a direct threat of substantial harm to the employee or others.

An applicant or employee who believes he or she needs a reasonable accommodation of a disability should discuss the need for possible accommodation with the Human Resources Department, or his or her direct supervisor.

Apply About employer

More about this job

Responsibilities

The Senior Application Security Engineer is responsible for securing the Paymentus SaaS platform by identifying and remediating risks across web applications, APIs, and AI components. This role involves performing secure design reviews, threat modeling, and providing technical leadership to engineering teams.

Requirements

Candidates must have a Bachelor's degree in a technical field and over 6 years of experience in software engineering or application security. Deep expertise in modern SaaS architecture, cloud-native patterns, and multiple programming languages like Java or Python is required.

Skills

Application Security
Secure Code Review
Threat Modeling
API Security
Cloud Security
Java
NodeJS
Python
Golang
OWASP Top 10
Kubernetes
SAST
DAST
SCA
CI/CD
AI/LLM Security

Visa sponsorship

Not detected in the job text

Keywords

SaaS
RESTful APIs
Microservices
Cloud-native
AI
LLM
OWASP
SAST
DAST
SCA
AWS
GCP
Azure
Kubernetes
Docker
CI/CD
Infrastructure as Code
PCI DSS
SOC 2
OAuth 2.0
OIDC
JWT
mTLS
Nginx
Cloudflare
Fastly
CSSLP
CISSP
CCSP
Fintech

Report this job