Application Security Developer (AI)

TL;DR

Application Security Developer (Cybersecurity): Proactively discovering and remediating critical security vulnerabilities across applications by emulating real-world adversaries with an accent on offensive security and tool development. Focus on building innovative security solutions, conducting penetration testing, and partnering with development teams to eliminate flaws.

Location: Must be based in Canada (excluding Quebec). Candidates local to Burnaby, Calgary, or Toronto are expected to be in the office at least two days per week for Anchor Days.

Salary: $116,500 – $157,500 CAD

Company

hirify.global is a global leader in legal AI technology, providing software solutions that empower legal professionals to work smarter and more securely.

What you will do

• Write, review, and implement tools to help developers avoid security flaws and improve overall application security.
• Conduct penetration testing and offensive campaigns against internal assets to identify vulnerabilities.
• Lead formal threat modeling sessions and provide detailed guidance on vulnerability remediation.
• Collaborate with development teams to drive security awareness and establish systematic fixes for recurring issues.
• Implement and manage automated application scanning, static analysis (SAST), and SCA tools.
• Perform reactive incident response and forensics while researching new attack vectors.

Requirements

• Experience in Application or Product Security with a focus on offensive security and penetration testing.
• Hands-on expertise in exploiting complex vulnerabilities such as SSRF, Deserialization, and logic bypasses.
• Strong proficiency in at least one major language: Python, .NET, Ruby, or JavaScript.
• Experience securing applications in modern cloud environments (AWS, Azure, or GCP).
• Expertise with security tools including Burp Suite, SAST, SCA, and SIEM technologies.
• Must be located in Canada (excluding Quebec).

Nice to have

• Professional security certifications such as OSCP or OSWE.
• Experience with Ruby on Rails, Kubernetes, Terraform, or ELK stack.
• Strong AWS security experience specifically with EC2 and managed services.
• Active participation in the security community through open-source contributions or conference presentations.

Culture & Benefits

• Competitive salary with top-tier health, dental, and vision insurance.
• Hybrid work environment for those near hubs (Vancouver, Calgary, Toronto, etc.).
• Flexible time off policy with an encouraged 20 days off per year.
• Financial benefits including RRSP matching and RESP contributions.
• $2,000 annual counseling benefit and a structured hirify.globalversary recognition program.