Lead Application Security Engineer

TL;DR

Lead Application Security Engineer (Cybersecurity): Serving as the primary security lead for a major cloud-based technology project with an accent on designing secure solutions, conducting penetration testing, and ensuring regulatory compliance. Focus on identifying and remediating sophisticated vulnerabilities, performing risk analysis, and collaborating across global teams to protect complex systems.

Location: Must be based in St. John's, Toronto, or Montreal with a hybrid requirement of at least 3 days per week in-office.

Salary: $121,000 - $170,000

Company

A global technology company providing services in financial markets and beyond.

What you will do

• Serve as the information security lead for a cloud-based technology project.
• Design and implement security solutions to remediate vulnerabilities.
• Conduct penetration testing and ethical hacking across complex networks and applications.
• Evaluate software patches for threats like injection attacks and cross-site scripting.
• Prepare security risk analysis reports to support governance and compliance.

Requirements

• Bachelor's degree in Computer Science, Information Systems, or equivalent experience.
• 10+ years of experience in information security across on-premise and cloud environments.
• Hands-on experience with application security tools, including dynamic and static analysis.
• Active certification required: CISSP, CISA, CCSP, or GIAC.
• Strong ability to assess and communicate security risks across complex platforms.

Nice to have

• Experience supporting regulatory compliance in financial services.
• Familiarity with Google Cloud security architecture.
• Track record of working in matrixed, global organizations.

Culture & Benefits

• Competitive base salary with annual bonus and equity incentives.
• Comprehensive benefits package for employees and their families.
• Commitment to an inclusive workplace and reasonable accommodations.
• Opportunities for professional growth and development.