Key Responsibilities• Act as a subject matter expert on secure software development practices.
• Define, implement, and continuously improve application security controls, standards, guardrails, and baseline configurations.
• Assess the effectiveness of controls across CI/CD pipelines and application platforms, including web, mobile, APIs, containers, desktop applications, and Commercial Off-The-Shelf solutions.
• Lead threat modeling and secure design activities and provide technical recommendations on remediation approaches and security patterns.
• Own and continuously improve application security services and tooling, including selection, onboarding, configuration, optimization, testing, and lifecycle management.
• Lead application security testing activities (manual, automated) and remediation activities
• Drive security automation and repeatable controls implementation throughout the software development lifecycle.
• Partner with engineering, product, platform, architecture, and cybersecurity teams to design and implement appropriate security features and patterns.
• Create and maintain application security guidance, secure patterns, training materials, and technical documentation.
• Host training sessions, knowledge-sharing forums, and drive application security community of practice
• Provide training, coaching on API, web, mobile and application security principles and risks.
• Make decisions on complex issues and provide direction aligned with application security best practices
• Deliver outcomes with a high degree of autonomy and provide practical recommendations on complex application security matters.
Required Skills & Experience• Broad knowledge of application security, secure software development, application testing methodologies, secure coding, and secure product design.
• Strong understanding of modern application architectures, APIs, web services, and associated security risks.
• Strong knowledge of threat modeling and secure design methodologies.
• Working knowledge of cloud security concepts and controls in Azure and/or AWS as they relate to application workloads.
• Working knowledge of security automation with scripting languages such as Python and Bash.
• Knowledge of one or more development languages such as Java, Node.js, C#, or .NET.
• Knowledge of information security risk, security frameworks, regulatory requirements, and industry best practices.
• Strong problem-solving, communication, stakeholder management, and time-management skills.
• Hands-on experience with application security testing, implementation of secrets management solutions and CI/CD, container, API, serverless security controls
Qualifications• Degree in computer science or a related field, with 5 to 10+ years of relevant experience in IT, application security, or an equivalent combination of education and experience.
• Relevant security certification(s), such as CISSP, CSSLP, CEH, OSCP, or GIAC, or demonstrated equivalent security knowledge and experience.
• Cloud or vendor-specific security certification(s), or demonstrated equivalent knowledge and experience, are considered an asset.
Why Join Us? At
Intelcom | Dragonfly, you'll thrive in a flexible and stimulating environment, surrounded by passionate talent. You'll also enjoy a wide range of benefits:
- On-site gym with a personal trainer
- Employer-provided lunch of your choice
- Comprehensive group insurance
- Group RRSP plan
- Care & Well-Being Activities
- Partial reimbursement for public transportation
- Employee Assistance Program
...and much more.
This position has been opened to address a genuine organizational need within the company.
