Application Security Analyst
- Mississauga, ON, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
Job Description: Application Security Engineer
We are looking for an Application Security Engineer to strengthen secure software delivery and reduce application security risks. The role involves implementing Secure SDLC practices, conducting application security assessments and code reviews, leading threat modeling, and managing SAST, DAST, SCA, and secrets-scanning tools.
The candidate will work closely with development teams to promote secure coding practices, deliver developer security training, and coordinate vulnerability remediation, translating security findings into actionable solutions throughout the software development lifecycle.
More about this job
Responsibilities
Implement Secure SDLC practices, conduct application security assessments and code reviews, lead threat modeling, and manage SAST, DAST, SCA, and secrets-scanning tools. Partner with development teams to promote secure coding, provide security training, and coordinate vulnerability remediation across the software development lifecycle.
Requirements
The posting indicates a mid-senior-level role requiring application security expertise across secure software delivery, assessments, code reviews, and threat modeling. It does not specify formal education, certifications, or a minimum number of years of experience.
Skills
- Application Security Assessments
- Code Reviews
- Threat Modeling
- Static Application Security Testing
- Dynamic Application Security Testing
- Software Composition Analysis
- Secrets Scanning
- Secure Coding
- Developer Security Training
- Vulnerability Remediation
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Software
- Technology
Keywords
- Application Security
- Secure Software Delivery
- Secure SDLC
- Application Security Assessments
- Code Reviews
- Threat Modeling
- SAST
- DAST
- SCA
- Secrets Scanning
- Secure Coding Practices
- Developer Security Training
- Vulnerability Remediation
- IT Services
- IT Consulting