Posted 6 days ago
Application Security Engineer
@ Lorven Technologies Inc.
Canada
Overview
Lorven Technologies Inc. is hiring a contract Application Security Engineer to remediate application security findings hands-on, write fixes and open pull requests. The role also covers deploying and tuning SAST and SCA tools in CI/CD, triaging findings from SAST, SCA and pen tests, and reviewing designs for security. The posting requires availability during US business hours.
Responsibilities:
- Remediate application security findings in code and open PRs
- Deploy and tune SAST and SCA tools in CI/CD
- Triage and prioritize SAST, SCA and pen test findings
- Review PRs and designs for security issues
Requirements summary:
- Python and Go software development background
- Hands-on AppSec and vulnerability remediation experience
- Direct experience operating SAST and SCA tools in CI/CD
- Explains findings clearly to developers
- Available during US business hours
Tools & skills
Source and dates
Source type not verified · apify-linkedin
- Employer posting date
- 2026-11-04
- First seen by our source
- 2026-11-10
- Source record updated
- 2026-11-10
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Department | Quality assurance |
| Travel | air: none · ground: none |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Lorven Technologies Inc.
| Field | Value |
|---|---|
| Open jobs on Jobsy | 1 |
Job description:
What they'll do:
- Remediate application security findings hands-on: read the code, write the fix, open the PR. This is a dev-facing role, not a ticket-filing role.
- Deploy, configure, and tune SAST and SCA tooling in our CI/CD pipelines and repos, including rule tuning and false positive cleanup.
- Triage findings from SAST, SCA, and pen tests, prioritize them, and drive them to closure with engineering teams.
- Review PRs and designs for security issues and help build secure coding guidance for developers.
What we need:
- Software development background in Python and Go. Must be comfortable writing production code and opening PRs.
- Hands-on AppSec experience, especially vulnerability remediation (OWASP Top 10, dependency vulns, secrets, auth/session issues).
- Direct experience deploying and operating SAST and SCA tools in CI/CD, not just consuming their output.
- Works well with developers and can explain findings in plain language.
- Available during US business hours.
Nice to have: healthcare or other regulated-industry experience.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.