Назад
6 дней назад

Ingénieur(e) principal(e) en sécurité des produits (télétravail)

115 000 - 165 000CAD
Формат работы
remote (только Canada)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Canada
Вакансия из списка Hirify.GlobalВакансия из Hirify RU Global, списка компаний с восточно-европейскими корнями
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Ingénieur(e) principal(e) en sécurité des produits (télétravail) (sécurité des produits/Linux) : Analyse des produits de protection des points de terminaison, recherche de failles de conception et d'implémentation, et accompagnement des ingénieurs dans la livraison de code sécurisé avec un accent sur les applications Linux, les composants noyau et les capteurs de point de terminaison. Focus on la modélisation des menaces, l'analyse de code source, les tests offensifs, l'automatisation de la sécurité et la résolution de vulnérabilités complexes.

Location: Remote in Quebec, Canada. This is Canadian-based employment, and employees must maintain legal entitlement to work in Canada.

Base salary: CAD 115,000–165,000 per year, plus variable or incentive compensation, equity, and benefits.

Company

Cybersecurity company building an AI-native platform that protects organizations through large-scale distributed systems and endpoint security products.

What you will do

  • Advise product teams on the security of endpoint protection products, with a focus on endpoint sensors.
  • Create and maintain threat models to guide security decisions.
  • Review application source code and identify design flaws, vulnerabilities, and common software weaknesses.
  • Attack endpoint applications and kernel components before production using manual and tool-assisted techniques.
  • Work with developers to explain risks and design weaknesses and help implement effective fixes.
  • Build security tools and automation, and validate or reproduce relevant bug bounty reports.

Requirements

  • 10+ years of engineering experience, ideally in security.
  • Experience programming in or assessing the security of C/C++ applications for Linux.
  • Strong knowledge of Linux system internals and security features.
  • Understanding of concurrency in multithreaded applications and the security implications of containerization and virtualization.
  • Knowledge of common weaknesses in endpoint and client/server applications, with the ability to help engineers remediate them.
  • Experience working with technical teams in Agile/DevOps environments and using AI technologies to improve decision-making and workflows.

Nice to have

  • Rust and Go programming.
  • Experience with Ghidra, IDA Pro, or similar debugging and analysis tools.
  • Application security automation, threat modeling with STRIDE, or application penetration testing.
  • Reverse engineering, malware analysis, or related security research experience.

Culture & Benefits

  • Remote work with flexibility and autonomy.
  • Comprehensive physical and mental wellness programs.
  • Competitive vacation, holidays, and paid parental and adoption leave.
  • Professional development opportunities and employee networks.
  • Compensation includes equity and benefits.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →