Senior Security Engineer (Application Security)

Location: Remote in Canada; travel requirement: 0–10%

Company

hirify.global is an industrial technology company developing software and connected solutions for construction, geospatial, government, transportation, and other essential industries.

What you will do

• Own the execution, expansion, and optimization of enterprise DAST, IAST, API Security, and Runtime Security solutions.
• Establish API discovery, continuous posture management, runtime controls, and security initiatives for AI/LLM implementations.
• Correlate DAST, IAST, SAST, SCA, and runtime telemetry to improve risk prioritization and reduce noise.
• Integrate dynamic security automation into CI/CD pipelines alongside SAST, SCA, Container, and IaC security tools.
• Advise engineering, DevOps, and product teams on runtime protection across technology stacks and cloud environments.

Requirements

• 6+ years of dedicated experience in Application Security, Product Security, or Software Security Engineering in complex enterprise environments.
• Hands-on mastery of enterprise DAST and IAST platforms such as Burp Suite Enterprise, Rapid7, Veracode DAST, Contrast Security, or HCL AppScan.
• Deep understanding of API security testing for REST, GraphQL, and gRPC; API gateways; and runtime defense models including RASP, eBPF monitoring, and WAF/WAAP.
• Experience securing multi-language applications using Java, Python, Go, Node.js, C#/.NET, and C++.
• Experience automating security scans in modern CI/CD workflows and cloud environments including AWS, Azure, and GCP.
• Strong knowledge of CVSS v3/v4, EPSS, and OWASP Top 10 vulnerability scoring and prioritization frameworks.

Nice to have

• Experience securing AI-enabled applications, LLM wrappers, and APIs against OWASP LLM Top 10 threat vectors.
• Familiarity with SAST, SCA, Container Security, and Infrastructure-as-Code scanning.
• Software engineering experience with Python, Go, or Bash automation and multi-language source-code review.
• Certifications such as OSCP, OSWE, GWAPT, CISSP, AWS Certified Security Specialty, or CKS.

Culture & Benefits

• Remote work from Canada with 0–10% travel.
• Work on technology intended to improve productivity, safety, quality, and sustainability across essential industries.
• Collaborative, supportive, ownership-oriented culture built around Belong, Grow, and Innovate.
• Opportunity to influence application security strategy across a global, multi-product software portfolio.

Hiring process

• Submit an online application through one of the Apply buttons in the posting.