Назад
Company hidden
5 часов назад

Senior Application Security Analyst (Cloud/EdTech)

140 000 - 175 000CAD
Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Canada
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Application Security Analyst (Cloud/EdTech): Refining and delivering an application security program for cloud-based education platforms with an accent on endpoint, application, infrastructure, and third-party risk. Focus on performing security scans and assessments, reviewing code and controls, coordinating remediation, and supporting audits across large-scale and serverless environments.

Location: Kitchener, Ontario, Canada

Salary: CAD 140,000–175,000 annual base salary

Company

hirify.global develops cloud-based learning environments and education solutions that support personalized, student-centric teaching and learning.

What you will do

  • Refine and deliver the Application Security Program across endpoints, applications, and underlying infrastructure.
  • Collaborate with engineering and operational teams on existing and emerging security risks, explaining relevant controls to stakeholders.
  • Perform regular security scans, triage third-party assessments, and coordinate remediation of open findings.
  • Monitor security risks and related artifacts throughout their lifecycle.
  • Support internal security assessments, reviews, and audits, including evidence generation.
  • Review independent security reports from vendors, suppliers, and partners for alignment with the Application Security Program.

Requirements

  • Practical programming experience and proficiency reviewing code in a variety of languages.
  • Hands-on experience implementing information security controls across Endpoint Security, Application Security, and Infrastructure Security, including SAST, DAST, and SCA.
  • Hands-on experience with public cloud services such as AWS or Azure.
  • Hands-on experience performing vulnerability assessments and penetration tests.
  • Experience working with teams implementing controls based on ISO 27001, NIST 800-53, PCI-DSS, and PBMM.
  • Experience using enterprise-grade governance, risk, and compliance tools.
  • Experience assessing security control implementations in large-enterprise, web-scale, and serverless environments.
  • Experience engaging stakeholders to remediate security findings and supporting audits by generating security-related evidence.
  • Ability to explain complex technical concepts clearly, work independently, learn quickly, synthesize information across domains, and collaborate with engineering and operational teams.

Nice to have

  • Experience in both Red Team and Blue Team activities.

Culture & Benefits

  • Flexible work arrangements and an inclusive, fair work environment.
  • Learning and growth opportunities, including tuition reimbursement of up to CAD 4,000 through the SkillsWave Program and two paid days for related exams or final assignments.
  • Employee wellbeing support, including mental health services, an EFAP program, and financial planning.
  • Retirement planning, competitive benefits, wellness reimbursement, home internet reimbursement, and volunteer days.
  • Additional potential compensation may include equity grants and a variable incentive.
  • Dog-friendly office spaces are available at headquarters in Kitchener and offices in Winnipeg, Vancouver, and Melbourne.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →