Log in Sign up free
Apply now

Posted 2 months ago

Senior Application Security Engineer – Snyk, SAST, SCA & DAST

@ Astra North Infoteck Inc.

View all jobs

Toronto, Ontario

10+ years experience
Apply now
SIGNALS

Overview

Astra North Infoteck Inc. is hiring a Senior Application Security Engineer to lead application security tooling across the enterprise, with a focus on Snyk, SAST, SCA and DAST platforms. The work includes migrating security tooling from Veracode to Snyk in a large regulated environment. The posting asks for 10 years of application security, cybersecurity or DevSecOps experience; no schedule, pay or work arrangement is stated.

Responsibilities:

  • Implement, administer and engineer Snyk and other AppSec platforms
  • Migrate application security tooling, preferably from Veracode to Snyk
  • Operate enterprise SAST, SCA and DAST programs
  • Support regulated-industry security and compliance requirements

Requirements summary:

  • 10 years in Application Security, Cybersecurity or DevSecOps
  • 5 years hands-on with enterprise SAST, SCA and DAST platforms
  • 3 years implementing or administering Snyk
  • Experience in banking, financial services, insurance, healthcare or government
  • Certifications such as CISSP, CSSLP, GWAPT, GWEB, CEH or cloud security credentials

Tools & skills

SnykVeracode
Source and dates

Source type not verified · zoho

Employer posting date
2026-09-03
First seen by our source
2026-10-11
Source record updated
2026-10-11

These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.

Job details

SenioritySenior
DepartmentIT
Experience10+ years
Work settingOffice
PositionMostly sitting
Physical demandsphysical low · computer high
LanguagesEnglish
Licences & certificationsCISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer

Summary and details written by AI from the posting; the employer’s posting is the authority.

Apply now

Astra North Infoteck Inc.

View all jobs
FieldValue
Open jobs on Jobsy426
Job description

Senior Application Security Engineer – Snyk, SAST, SCA & DAST

• 10 years of experience in Application Security, Cybersecurity, or DevSecOps.

• 5 years of hands-on experience with enterprise SAST, SCA, and DAST platforms.

• 3 years of implementation, administration, or engineering experience with Snyk.

• Demonstrated experience migrating application security tooling, preferably from Veracode to Snyk, in a large enterprise environment.

• Experience supporting regulated industries such as banking, financial services, insurance, healthcare, or government.

• Snyk product certifications or advanced Snyk platform training. CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials.

• Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.


Similar jobs

  • Application Security Engineer

    Toronto, ON
    Full Time

    TSX Inc.

    3+ YOECandidates need 3+ years of application security engineering, penetration testing and secure code review experience. They must know OWASP Top 10 and CWE Top 25, secure development practices, cloud and microservices security, and tools such as Burp Suite and SAST/DAST scanners.

    Burp Suite Professional, SQLmap, Wireshark, SAST tools, DAST tools, CSPM tools

  • Senior Application Security Engineer

    Richmond Hill, ON
    Full Time

    Paymentus: Paymentus® (NYSE: PAY) is the leading provider of real-time, cloud-based billing, payment, and customer engagement solutions.

    6+ YOECandidates need 6+ years of hands-on software or security engineering experience, strong coding skills in Java, NodeJS, Python or Golang, and deep knowledge of application, API and LLM security. A bachelor's degree in a technical field or equivalent practical experience is also required.

    SAST, DAST, SCA, Kubernetes, Cloudflare, Fastly

  • Senior Application Security Engineer

    Toronto, ON
    RemoteFull Time

    BioRender

    Candidates need strong software engineering skills in Node.js and React, with Python a plus, and hands-on web application security and secure coding experience. They should have SAST/DAST and CI/CD integration experience, AWS and Terraform security skills, threat modeling, and working knowledge of cryptography, PKI and TLS.

    AWS, Terraform, Cloudflare, HackerOne, SAST tools, DAST tools

  • Application Security Engineer - ADR

    Toronto, ON
    $120k–$203k/yrFull Time

    SSB&T

    6+ YOECandidates need several years of software development and application security experience, including hands-on work with ADR, WAAP, or RASP tools and the OWASP Top 10. A bachelor's degree in IT, computer science or a related field with 6 years of relevant experience is preferred, and CISSP, GCIH, GWAPT or Security+ certifications are valued.

    Kubernetes, Terraform, Ansible, Azure, AWS

  • Senior Application Security Engineer

    Alberta +1
    RemoteFull Time

    Forward Financing: Forward Financing is a financial technology company based in Boston, Massachusetts with team members throughout the United States, Dominican…

    5+ YOECandidates need 5+ years in application or offensive security, hands-on pentesting and code review skills, and knowledge of AI/LLM attack surfaces. They should know Ruby, Python, TypeScript or Go and secure SDLC practices, and communicate risk clearly.

    SAST tools, AWS

  • Application Security Engineer

    Toronto, ON
    On-siteFull Time

    Opendoor

    Candidates need application security or software engineering experience with a security focus, strong coding skills in Python, Go, TypeScript or Ruby, and hands-on use of security scanning tools. They also need knowledge of API vulnerabilities, threat modeling, and cloud and Kubernetes security.

    GitHub Advanced Security, Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Apollo GraphQL

  • Application Security Engineer II

    Toronto, ON +1
    RemoteFull Time

    Thumbtack

    4+ YOECandidates need 4+ years of software engineering or application security experience, with practical skill in threat modeling, authentication, secrets management and OWASP Top 10 risks. Strong written and verbal communication and a growth mindset are also required.

    Security threats, Documentation, Incident response, Communication skills, Recruitment

  • Senior Application Security Engineer II

    Toronto, ON
    $180k–$220k/yrHybridFull Time

    Relay: Relay is a financial technology company and is not an FDIC-insured bank.

    5+ YOECandidates need 5 to 6 years of application security or penetration testing experience, production software shipping experience, deep knowledge of OWASP Top 10, and daily use of AI tools for development. Strong communication and developer mentorship skills are also expected.

    Datadog, Burp Suite, Claude Code, Cursor, TypeScript, Node.js

Locations & environments

Locations

All of CanadaRemote · Hybrid · On-site · Field

Pro tip: add remote jobs to widen your search.

Exclude locations

Workplace type

Company jobs in these results

These are this company’s jobs loaded in your current search. The company may have more openings.