Application Security Engineer Canada Remote - 3 months contract

Remote • Posted 11 hours ago • Updated 11 hours ago
Contract W2
Contract Corp To Corp
Contract Independent
12 Months
No Travel Required
Remote
Depends on Experience
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • 1. Software development background in Python and Go. Must be comfortable writing production code and opening PRs. 2. Hands-on AppSec experience
  • especially vulnerability remediation (OWASP Top 10
  • dependency vulns
  • secrets
  • auth/session issues). 3. Direct experience deploying and operating SAST and SCA tools in CI/CD
  • not just consuming their output.

Summary

Role: Application Security Engineer

Location: Canada – Remote

Domain: Healthcare

Contract : 3 months with possible extension

Additionally as we see that senior level candidates are currently facing rejections we would like to focus more on looking for more expert candidates (higher then seniors)

Job description:

What they'll do:

  1. Remediate application security findings hands-on: read the code, write the fix, open the PR. This is a dev-facing role, not a ticket-filing role.
  2. Deploy, configure, and tune SAST and SCA tooling in our CI/CD pipelines and repos, including rule tuning and false positive cleanup.
  3. Triage findings from SAST, SCA, and pen tests, prioritize them, and drive them to closure with engineering teams.
  4. Review PRs and designs for security issues and help build secure coding guidance for developers.

What we need:

  1. Software development background in Python and Go. Must be comfortable writing production code and opening PRs.
  2. Hands-on AppSec experience, especially vulnerability remediation (OWASP Top 10, dependency vulns, secrets, auth/session issues).
  3. Direct experience deploying and operating SAST and SCA tools in CI/CD, not just consuming their output.
  4. Works well with developers and can explain findings in plain language.
  5. Available during US business hours.

Nice to have: healthcare or other regulated-industry experience.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10120137
  • Position Id: 72609-10367-1793896827
  • Posted 11 hours ago
Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.