As of November 6, 2026, Jobsy lists 8 application security engineer jobs in Toronto, ON. The most active employers are Accelerant, Spring Financial Inc. and BioRender. Skills often requested: aws, python, ci/cd and penetration testing.
No matching filters. Try another name.
8 jobs·Latest jobs · Canada··
Why we group jobs by company
Jobs from the same identified company share one card in each results page. As you load more, we merge that company’s additional jobs into its existing card, so large employers do not keep taking extra space. Use the arrows or numbered dots to browse, or View all to compare its loaded jobs and reach the company’s full list. Company pages show separate job cards.
3+ YOECandidates need 3+ years of application security engineering, penetration testing and secure code review experience. They must know OWASP Top 10 and CWE Top 25, secure development practices, cloud and microservices security, and tools such as Burp Suite and SAST/DAST scanners.
Candidates need strong software engineering skills in Node.js and React, with Python a plus, and hands-on web application security and secure coding experience. They should have SAST/DAST and CI/CD integration experience, AWS and Terraform security skills, threat modeling, and working knowledge of cryptography, PKI and TLS.
6+ YOECandidates need several years of software development and application security experience, including hands-on work with ADR, WAAP, or RASP tools and the OWASP Top 10. A bachelor's degree in IT, computer science or a related field with 6 years of relevant experience is preferred, and CISSP, GCIH, GWAPT or Security+ certifications are valued.
10+ YOECandidates need about 10 years in application security, cybersecurity or DevSecOps, including 5 years with enterprise SAST, SCA and DAST tools and 3 years working with Snyk. Experience in regulated industries and knowledge of secure development standards such as OWASP and NIST are expected, plus security certifications like CISSP or CEH.
Candidates need application security or software engineering experience with a security focus, strong coding skills in Python, Go, TypeScript or Ruby, and hands-on use of security scanning tools. They also need knowledge of API vulnerabilities, threat modeling, and cloud and Kubernetes security.
4+ YOECandidates need 4+ years of software engineering or application security experience, with practical skill in threat modeling, authentication, secrets management and OWASP Top 10 risks. Strong written and verbal communication and a growth mindset are also required.
Security threats, Documentation, Incident response, Communication skills, Recruitment
Relay: Relay is a financial technology company and is not an FDIC-insured bank.
5+ YOECandidates need 5 to 6 years of application security or penetration testing experience, production software shipping experience, deep knowledge of OWASP Top 10, and daily use of AI tools for development. Strong communication and developer mentorship skills are also expected.
Datadog, Burp Suite, Claude Code, Cursor, TypeScript, Node.js
Capco: Capco, a Wipro company, is a global technology and management consultancy specializing in driving digital transformation in the financial services…
10+ YOECandidates need 10+ years in network security, application security or infrastructure, with substantial hands-on WAF experience, ideally with Cloudflare or Akamai. They also need practical knowledge of DNS, HTTP/HTTPS, TLS and traffic routing, plus experience tuning WAF rules and working across teams.
Cloudflare, Akamai
Common questions
Who is hiring application security engineers?
Accelerant (2), Spring Financial Inc. (2), BioRender (1), Capco (1) and CGI (1).
What skills do application security engineer jobs ask for?
Postings most often mention aws, python, ci/cd, penetration testing, communication skills, github, security threats and incident response.