Application Security Developer

About the role

This role will lead technical work focused on secure, reliable systems and risk-aware execution. You will work across engineering, product, operations, and business stakeholders to translate complex requirements into practical technology solutions. The position offers the opportunity to influence architecture, execution quality, and the technology capabilities that enable long-term growth within a technology-driven environment.

Location: Remote - US based candidates only, no visa sponsorship available.

Responsibilities

• Write, review, debug, and implement security tools for developers
• Advise development teams on security best practices
• Drive security awareness and education within the organization
• Support teams in vulnerability remediation and create systematic fixes
• Maintain relationships with researchers in the Bug Bounty program
• Implement automated application scanning and static analysis tools
• Conduct penetration testing and proactive threat research

Qualifications

• 5-7 years of experience in Application or Product Security, focusing on offensive security and penetration testing
• Hands-on experience with complex vulnerabilities (e.g., SSRF, Deserialization)
• Proven ability to lead threat modeling sessions
• Strong proficiency in a programming language (e.g., Python, .NET, Ruby, JavaScript)
• Experience securing applications in cloud environments (AWS, Azure, GCP)
• Familiarity with application security tools (e.g., Burp Suite, SAST)
• Ability to analyze logs for malicious behavior

Pay

$116,500 – $157,500 annually

Benefits

• Competitive salary with health, dental, and vision insurance
• Hybrid work model with in-office expectations
• Flexible time off policy (20 days off encouraged)
• Annual $2000 counseling benefit
• RRSP matching and RESP contributions
• Recognition program for long-term service milestones