Job: Principal Application Security Architect
Location: Richmond Hill, ON, Canada (office-based)
The opportunity:The successful candidate will work as part of a small team of subject-matter experts, providing security expertise to software development teams producing world class enterprise information management applications. In a time of increasing interconnectivity and rising expectations of rapid content delivery, security is a paramount concern.
Your Impact: In this role you will focus on continually improving the Secure Software Development Lifecycle and evangelizing the importance of security to more than 4000 software engineers globally. You will also support a team responsible for locating security vulnerabilities and preventing them as early as possible in the development process. You will be expected to demonstrate their technical knowledge and help OpenText produce software that exceeds the security requirements of customers worldwide.
What the role offers: • Security of web, cloud-based and AI agentic applications, databases, and a solid understanding of the technologies involved (such as JavaScript, Single Page Apps, Oauth, microservice architecture, etc)
• Application vulnerability types, exploit techniques, and mitigation approaches
• Sophisticated hacking techniques and tooling
• Advanced level software vulnerability scanning tools and detection methods including frontier AI scanning
• Integrating security checks into a CI-CD pipeline for cloud applications
• Design and mentoring on the creation and use of threat models
• Hands-on experience with COTS and open-source application security testing tools
• Securing and hardening virtualized and containerized deployment environments.
• Securing and hardening supply chains
• Software security standards, compliance processes, and common application security controls
What you need to succeed: - 10+ years of web application security and vulnerability analysis
- Skilled at research and driven to be current and informed on cybersecurity trends
- Persuasive, clear, concise communicator, both verbally and written
- Highly organized with an ability to meet deadlines
- Self-motivated with a drive to succeed for yourself, your team and your company
- Excellent people skills with ability to network with product development teams, software architects, and dev/ops both in-person and remotely, instilling security into the development culture
- Background/understanding of agile software development life cycle
- Strong analytical / troubleshooting skills
- Commitment to quality and a thorough approach to work.
- Excellent writing and presentation skills
- A natural curiosity and detective skills
Education:- Degree or commensurate experience in computer science, computer engineering, or information security related disciplines
- CISSP and/or CEH certified
One last thing: OpenText is more than just a corporation, it's a global community where trust is foundational, the bar is raised, and outcomes are owned.
Join us on our mission to drive positive change through privacy, technology, and collaboration. At OpenText, we don't just have a culture; we have character. Choose us because you want to be part of a company that embraces innovation and empowers its employees to make a difference.
#LI-KP2
Compensation: At OpenText, we offer a thoughtfully designed benefits package that supports your physical, emotional, and financial wellbeing. As you move through the hiring process, we're happy to provide more details about our compensation programs, including variable and commission compensation opportunities for eligible roles, vacation entitlement, and paid time off.
AI Usage Disclosure: As part of our commitment to transparency, we use artificial intelligence (AI) tools to assist in various stages of our recruitment process, including resume screening, candidate matching, interview scheduling, and communications. These tools are designed to improve efficiency, reduce bias, and enhance candidate experience. All decisions regarding hiring are made by qualified human professionals, and we continuously monitor our AI systems to ensure fairness and compliance with applicable regulations.
