Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
140к-175к CAD/год
190к CAD200к CADмедиана260к CAD
По похожим ролям (17) ~ 200к CAD/год
85
Хорошая вакансия
развернуть
Обязанности в application и cloud security описаны достаточно чётко, а обучение и продуктовая среда добавляют привлекательности. При этом работа указана как офисная, что ограничивает гибкость.
Кликните для подробной информации
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Senior Application Security Analyst (Cloud/EdTech): Refining and delivering an application security program for cloud-based education platforms with an accent on endpoint, application, infrastructure, and third-party risk. Focus on performing security scans and assessments, reviewing code and controls, coordinating remediation, and supporting audits across large-scale and serverless environments.
Location: Kitchener, Ontario, Canada
Salary: CAD 140,000–175,000 annual base salary
Company
hirify.global develops cloud-based learning environments and education solutions that support personalized, student-centric teaching and learning.
What you will do
Refine and deliver the Application Security Program across endpoints, applications, and underlying infrastructure.
Collaborate with engineering and operational teams on existing and emerging security risks, explaining relevant controls to stakeholders.
Perform regular security scans, triage third-party assessments, and coordinate remediation of open findings.
Monitor security risks and related artifacts throughout their lifecycle.
Support internal security assessments, reviews, and audits, including evidence generation.
Review independent security reports from vendors, suppliers, and partners for alignment with the Application Security Program.
Requirements
Practical programming experience and proficiency reviewing code in a variety of languages.
Hands-on experience implementing information security controls across Endpoint Security, Application Security, and Infrastructure Security, including SAST, DAST, and SCA.
Hands-on experience with public cloud services such as AWS or Azure.
Hands-on experience performing vulnerability assessments and penetration tests.
Experience working with teams implementing controls based on ISO 27001, NIST 800-53, PCI-DSS, and PBMM.
Experience using enterprise-grade governance, risk, and compliance tools.
Experience assessing security control implementations in large-enterprise, web-scale, and serverless environments.
Experience engaging stakeholders to remediate security findings and supporting audits by generating security-related evidence.
Ability to explain complex technical concepts clearly, work independently, learn quickly, synthesize information across domains, and collaborate with engineering and operational teams.
Nice to have
Experience in both Red Team and Blue Team activities.
Culture & Benefits
Flexible work arrangements and an inclusive, fair work environment.
Learning and growth opportunities, including tuition reimbursement of up to CAD 4,000 through the SkillsWave Program and two paid days for related exams or final assignments.
Employee wellbeing support, including mental health services, an EFAP program, and financial planning.
Retirement planning, competitive benefits, wellness reimbursement, home internet reimbursement, and volunteer days.
Additional potential compensation may include equity grants and a variable incentive.
Dog-friendly office spaces are available at headquarters in Kitchener and offices in Winnipeg, Vancouver, and Melbourne.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →