6 дней назад
Ingénieur(e) principal(e) en sécurité des produits (télétravail)
115 000 - 165 000CAD
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Ingénieur(e) principal(e) en sécurité des produits (télétravail) (sécurité des produits/Linux) : Analyse des produits de protection des points de terminaison, recherche de failles de conception et d'implémentation, et accompagnement des ingénieurs dans la livraison de code sécurisé avec un accent sur les applications Linux, les composants noyau et les capteurs de point de terminaison. Focus on la modélisation des menaces, l'analyse de code source, les tests offensifs, l'automatisation de la sécurité et la résolution de vulnérabilités complexes.
Location: Remote in Quebec, Canada. This is Canadian-based employment, and employees must maintain legal entitlement to work in Canada.
Base salary: CAD 115,000–165,000 per year, plus variable or incentive compensation, equity, and benefits.
Company
Cybersecurity company building an AI-native platform that protects organizations through large-scale distributed systems and endpoint security products.
What you will do
- Advise product teams on the security of endpoint protection products, with a focus on endpoint sensors.
- Create and maintain threat models to guide security decisions.
- Review application source code and identify design flaws, vulnerabilities, and common software weaknesses.
- Attack endpoint applications and kernel components before production using manual and tool-assisted techniques.
- Work with developers to explain risks and design weaknesses and help implement effective fixes.
- Build security tools and automation, and validate or reproduce relevant bug bounty reports.
Requirements
- 10+ years of engineering experience, ideally in security.
- Experience programming in or assessing the security of C/C++ applications for Linux.
- Strong knowledge of Linux system internals and security features.
- Understanding of concurrency in multithreaded applications and the security implications of containerization and virtualization.
- Knowledge of common weaknesses in endpoint and client/server applications, with the ability to help engineers remediate them.
- Experience working with technical teams in Agile/DevOps environments and using AI technologies to improve decision-making and workflows.
Nice to have
- Rust and Go programming.
- Experience with Ghidra, IDA Pro, or similar debugging and analysis tools.
- Application security automation, threat modeling with STRIDE, or application penetration testing.
- Reverse engineering, malware analysis, or related security research experience.
Culture & Benefits
- Remote work with flexibility and autonomy.
- Comprehensive physical and mental wellness programs.
- Competitive vacation, holidays, and paid parental and adoption leave.
- Professional development opportunities and employee networks.
- Compensation includes equity and benefits.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
7 дней назад
Senior Engineer, AI Product Security
153 000 - 166 000$
12 дней назад
Product Security Engineer IV (AI)
140 000 - 151 000$
Affirm
13 дней назад
Staff Product Security Engineer (AI)
173 000 - 233 000CAD
14 часов назад
Product Security Engineer (Fintech)
175 000 - 220 000$
7 дней назад
AI Security Engineer (AI)
100 000 - 150 000$
Okta
8 дней назад
Staff Product Security Engineer (AI)
141 000 - 193 000CAD