Posted 4 days ago
Application Security Engineer (senior - principal) Landmark
@ Halliburton
Calgary, Alberta
Overview
Halliburton is hiring an Application Security Engineer through its Landmark business line in Calgary, a senior-to-principal role on its digital energy software platforms. The work covers application security assessments, validating scanner findings, and guiding engineers through remediation within CI/CD and cloud environments. The posting states the role is full time and that compensation is competitive and commensurate with experience.
Responsibilities:
- Perform application security assessments and validate vulnerabilities
- Review SAST, DAST and SCA results and prioritize remediation
- Work with engineers to remediate and retest findings
- Support security controls in CI/CD and cloud deployments
Requirements summary:
- Undergraduate degree in Computer Science or related field
- Three or more years in software or security roles
- Working knowledge of secure software development
- Experience remediating application vulnerabilities
Tools & skills
Source and dates
Employer career site / ATS feed · successfactors
- Employer posting date
- 2026-11-03
- First seen by our source
- 2026-10-09
- Source record updated
- 2026-11-06
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | Software development |
| Experience | 3+ years |
| Hours per week | 40 (estimated) |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Education | Bachelor’s degree (required) |
| Fields of study | Computer Science |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Halliburton
Saved company profile
Historical company information from a saved The Jobs API profile (LinkedIn/Crunchbase fields). It is not live-verified; figures may have changed. Missing values remain unknown.
We collaborate and engineer solutions to maximize asset value for our customers.
Full company description
We collaborate and engineer solutions to maximize asset value for our customers. Founded in 1919, Halliburton is one of the world's largest providers of products and services to the energy industry. With more than 45,000 employees, representing 130 nationalities in more than 80 countries, the company helps its customers maximize value throughout the lifecycle of the reservoir – from locating hydrocarbons and managing geological data, to drilling and formation evaluation, well construction and completion, and optimizing production throughout the life of the asset.
- LinkedIn followers
- 2,993,130
- People associated on LinkedIn
- 60,022
- Reported office locations
- 3000 N. Sam Houston Pkwy E., Houston, Texas 77032, US
- Ukrainskaya ulitsa, Yuzhno-Sakhalinsk, Far Eastern Federal District 693003, RU
- 1517 Weeks Island Rd, New Iberia, LA 70560, US
- Calle 113 7-58, Bogota, Bogota, D.C. 110111, CO
- 11 Tuas South Ave 12, Singapore, Singapore 637131, SG
- Other recorded names
- Halliburton
- Specialties
- Drilling and Evaluation and Completion and Production
- Profile identifies a recruitment agency
- No
We collaborate and engineer solutions to maximize asset value for our customers. Founded in 1919, Halliburton is one of the world's largest providers of products and services to the energy industry. With more than 45,000 employees, representing 130 nationalities in more than 80 countries, the company helps its customers maximize value throughout the lifecycle of the reservoir – from locating hydrocarbons and…
| Field | Value |
|---|---|
| Industry | Oil and Gas |
| Company size | 10,001+ employees |
| Headquarters | Houston, Texas |
| Organization type | Public Company |
| Year founded | 1919 |
| Specialties | Drilling and Evaluation and Completion and Production |
| Open jobs on Jobsy | 8 |
| View page |
We are looking for the right people — people who want to innovate, achieve, grow and lead. We attract and retain the best talent by investing in our employees and empowering them to develop themselves and their careers. Experience the challenges, rewards and opportunity of working for one of the world’s largest providers of products and services to the global energy industry.
About Landmark
Landmark, a Halliburton business line, provides the industry’s most comprehensive suite of digital solutions for exploration, drilling, and production optimization. Its software and data platforms empower customers to model subsurface assets, manage drilling risk, and accelerate decision-making through cloud, AI, and advanced analytics.
About the Role
As an Application Security Engineer at Landmark, you will help identify and reduce security risk in the software products and digital platforms used by the energy industry. Working under general direction, you will perform and support application security assessments, analyze security-testing results, investigate vulnerabilities, and partner with engineering teams to move findings through remediation.
You will work across application security, secure software development, DevSecOps, cloud security, and software supply chain security. The role requires someone who can examine technical use cases, identify realistic attack paths, distinguish meaningful risks from tool-generated noise, and provide practical guidance that helps development teams build and deliver more secure software.
Key Responsibilities
- Perform application security assessments and analyze potential vulnerabilities across web applications, APIs, cloud services, and enterprise software.
- Review results from static application security testing, dynamic application security testing, software composition analysis, and related security tools.
- Validate findings, assess exploitability and business impact, identify potential attack paths, and help prioritize remediation.
- Work directly with software engineers to explain identified risks, recommend practical corrective actions, and track vulnerabilities through resolution.
- Support the integration and operation of security controls within CI/CD pipelines and software development workflows.
- Contribute application security requirements and guidance throughout the software development lifecycle.
- Review application architectures, designs, features, and technical changes for common security weaknesses and potential misuse scenarios.
- Retest remediated vulnerabilities and document whether corrective actions adequately address the identified risk.
- Support secure cloud application deployments by reviewing relevant identity, access, logging, networking, configuration, and data-protection controls.
- Help identify risks in open-source components, third-party dependencies, build artifacts, and other parts of the software supply chain.
- Document assessment results, remediation guidance, risk decisions, and security metrics clearly for technical and business stakeholders.
Qualifications
Required
- Undergraduate degree in Computer Science or a related field.
- A minimum of three years of experience in software development, Application Security, Cybersecurity, DevSecOps, Cloud Security, or a related technical discipline.
- Working knowledge of the software development lifecycle and secure software development practices.
- Experience identifying, evaluating, or remediating security vulnerabilities in software applications.
- Understanding of common application attack vectors, security weaknesses, and software security controls.
- Ability to communicate technical security risks and remediation guidance clearly to software engineering and product delivery teams.
Preferred
- Experience with SAST, DAST, SCA, vulnerability-management platforms, penetration-testing tools, or comparable application security technologies.
- Familiarity with OWASP guidance, threat modeling, API security, authentication, authorization, session management, encryption, and secure coding practices.
- Experience with GitLab or another source-code repository and CI/CD platform.
- Familiarity with Microsoft Azure, Amazon Web Services, or comparable cloud platforms, including identity and access management, logging, networking, and secure deployment concepts.
- Experience with Terraform, pipeline automation, infrastructure as code, or scripting using languages such as Python, PowerShell, or Bash.
- Familiarity with software supply chain security, including third-party dependency risk, software composition analysis, software bills of materials, artifact integrity, or CI/CD security controls.
- Awareness of emerging security considerations associated with AI-enabled applications, machine learning services, or AI-assisted software development.
Candidates who possess qualifications exceeding the minimum job requirements may be considered for higher-level positions based on experience, additional qualifications, demonstrated capabilities, and current business needs. Depending on education, experience, and skill level, candidates may be eligible for roles ranging from Application Security Engineer to Application Security Engineer Sr or Application Security Engineer Principal.
Core Competencies
Application Security | Secure SDLC | DevSecOps | Vulnerability Management | SAST | DAST | Software Composition Analysis | Threat Modeling | OWASP | API Security | Cloud Security | Secure Coding | Vulnerability Remediation | CI/CD Security | Software Supply Chain Security | GitLab | Azure | AWS
Halliburton is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, disability, genetic information, pregnancy, citizenship, marital status, sex/gender, sexual preference/ orientation, gender identity, age, veteran status, national origin, or any other status protected by law or regulation.
Location
700 9th Ave SW Suite 2000, Calgary, Alberta, T2P 3V4, Canada
Job Details
Requisition Number: 212115
Experience Level: Experienced Hire
Job Family: Engineering/Science/Technology
Product Service Line: Landmark Software & Services
Full Time / Part Time: Full Time
Additional Locations for this position:
Compensation Information
Compensation is competitive and commensurate with experience.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.