Senior Application Security Analyst
- Toronto, ON, Canada
Full-time
Applications open in a new tab.
Job details
- Job type
- Full-time
- Apply by
- Posting language
- English
- Posted
Original job description
Snyk SME (Application Security Transformation Lead). Please find the update JD.
- Location : Toronto, ON
- Job description:
- Skills Required:
- Key responsibilities
- • Extensive experience in Application Security, Cybersecurity, or DevSecOps, with the depth of expertise
- required to lead application security transformation initiatives.
- • Demonstrated hands-on experience with enterprise SAST, SCA, and DAST platforms.
- • Demonstrated implementation, administration, or engineering experience with Snyk.
- • Demonstrated experience migrating application security tooling, preferably from Veracode to Snyk, in a large
- enterprise environment.
- • Experience supporting regulated industries such as banking, financial services, insurance, healthcare, or
- government.
- • Snyk product certifications or advanced Snyk platform training.
- • CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent
- credentials.
- • Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework,
- OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.
More about this job
Responsibilities
Lead application security transformation initiatives and provide subject-matter expertise in Snyk. Implement, administer, or engineer application security platforms, including supporting enterprise migrations from Veracode to Snyk.
Requirements
Requires extensive application security, cybersecurity, or DevSecOps experience, hands-on expertise with enterprise SAST, SCA, and DAST platforms, and demonstrated Snyk experience. Experience in regulated industries, Snyk training or certification, relevant security credentials, and knowledge of recognized security frameworks and standards are also sought.
Skills
- Application Security
- Cybersecurity
- DevSecOps
- SAST
- SCA
- DAST
- Snyk
- Application Security Tool Migration
- Veracode
- Enterprise Security
- NIST SSDF
- NIST Cybersecurity Framework
- OWASP Top 10
- OWASP API Security Top 10
- CWE/SANS Top 25
- ISO 27001
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Software
- Security & Safety
- Management & Leadership
Keywords
- Application Security
- Cybersecurity
- DevSecOps
- Snyk
- Veracode
- SAST
- SCA
- DAST
- Application Security Transformation
- Security Tool Migration
- Banking
- Financial Services
- Insurance
- Healthcare
- Government
- CISSP
- CSSLP
- GWAPT
- GWEB
- CEH
- Azure Security Engineer
- AWS Security Specialty
- NIST Secure Software Development Framework
- NIST Cybersecurity Framework
- OWASP Top 10
- OWASP API Security Top 10
- CWE/SANS Top 25
- ISO 27001
- PCI DSS
- SOC 2