Senior Engineer, Application Security

Location: Not specified; flexible remote work policies are mentioned.

Company

hirify.global provides a cloud commerce platform that unifies online and physical operations for retail, hospitality, and golf businesses worldwide.

What you will do

• Operationalize Secure by Design principles across feature design, pull requests, infrastructure-as-code checks, and engineering workflows.
• Architect feature and infrastructure threat models and validate AI-generated threat modeling pipelines.
• Configure and tune SAST, DAST, SCA, secrets, and LLM scanner rulesets to reduce false positives and improve vulnerability operations.
• Build AI-driven automation for vulnerability triage and remediation while maintaining legacy security controls.
• Provide technical remediation guidance for structural flaws and web application vulnerabilities.
• Lead developer security enablement through the Security Champions program, secure coding workshops, and automated CI/CD guardrails.

Requirements

• Deep hands-on experience in application security, product security, or secure software engineering in cloud environments.
• Bachelor's degree in Computer Science, Cybersecurity, or Software Engineering, or equivalent practical experience.
• Strong knowledge of OWASP Top 10 vulnerabilities, business logic flaws, and secure coding practices.
• Experience tuning SAST, DAST, SCA, secrets, and LLM scanner pipelines in CI/CD environments.
• Experience with threat modeling, Secure by Design principles, developer remediation guidance, and AI/LLM-assisted security analysis.
• Fluency in modern programming languages such as Python, Go, JavaScript/TypeScript, or Java, plus strong cross-functional communication skills.

Culture & Benefits

• Flexible paid time off and remote work policies.
• Health insurance, pension contributions through RRSP, and a $500 annual health and wellness benefit.
• Equity participation, paid parental leave, and mental health counseling and coaching.
• Training opportunities, innovation time, and growth paths into technical or people management roles.
• Inclusive workplace with cultural and technical committees, volunteer days, and team social activities.

Hiring process

• Applicants must disclose criminal convictions, and a criminal record check is conducted as part of the hiring process.