Application Security Engineer

Location: Remote in Canada

Company

hirify.global is a web technology company serving millions of customers globally through brands including Bluehost, HostGator, Domain.com, Network Solutions, Register.com, and Web.com.

What you will do

• Operate and maintain application security scanning tools, including SAST, SCA, secrets scanning, and container scanning, across the SDLC.
• Triage findings, validate true positives, and prioritize remediation with engineering teams.
• Track vulnerabilities through closure and monitor SLA compliance.
• Onboard repositories and services into security tooling.
• Contribute to internal documentation, runbooks, and process improvements.
• Assist with basic scripting and automation tasks under the guidance of senior team members.

Requirements

• 2–4 years of experience in application security, security engineering, or a related software or QA engineering role.
• Working knowledge of common vulnerability classes, including OWASP Top 10, and secure SDLC practices.
• Basic scripting ability, preferably with Python, for automating repetitive tasks.
• Ability to communicate security findings clearly to developers.
• Strong attention to detail and ability to manage a queue of findings across multiple tools.

Nice to have

• Exposure to Defect Dojo, Dependency-Track, TruffleHog, Trivy, and/or Semgrep.
• Familiarity with CI/CD pipelines and how security scans integrate with them.
• Interest in developing skills in tool integration, automation, or custom rule writing.

Culture & Benefits

• Focus on work-life balance.
• Diversity, inclusion, belonging, and more than 20 affinity groups.
• Learning and development opportunities, mentoring, exposure to different business areas, and career growth.
• HMO benefits with 175k MBL and one free dependent after one year of service.
• Punctuality bonus and generous vacation policy.