“DAST tools” jobs in Canada – Page 2

No matching filters. Try another name.

Results

• 17d

  Snyk SME (Application Security Transformation Lead)

  Toronto, ON

  AN

  Astra North Infoteck Inc.

  10+ YOECandidates need 10+ years in application security, cybersecurity or DevSecOps, and 3+ years of hands-on Snyk work. They also need experience supporting regulated industries and security certifications such as CISSP, CSSLP or CEH.

  Snyk, Veracode

  29d

  Senior Application Security Engineer – Snyk, SAST, SCA & DAST

  Toronto, ON

  AN

  Astra North Infoteck Inc.

  10+ YOECandidates need about 10 years in application security, cybersecurity or DevSecOps, including 5 years with enterprise SAST, SCA and DAST tools and 3 years working with Snyk. Experience in regulated industries and knowledge of secure development standards such as OWASP and NIST are expected, plus security certifications like CISSP or CEH.

  Snyk, Veracode

  29d

  QA Test Manager – Environment, Application Performance & Security Testing

  Regina, SK

  Contract

  AN

  Astra North Infoteck Inc.

  7+ YOE3+ MgmtCandidates need 7+ years in IT QA, with 3+ years managing test environments, performance engineering or application security, plus insurance domain experience. Hands-on work with performance tools, security scanning tools and monitoring platforms is required.

  Apache JMeter, LoadRunner, NeoLoad, Gatling, SonarQube, Veracode

• 17d

  Intermediate Security Specialist

  Toronto, ON

  Contract

  

  Randstad Canada

  5+ YOECandidates need 5 to 8 years of cybersecurity experience, including hands-on work running exposure management or vulnerability programs. They must also have operated cloud security tools across both AWS and Azure and be able to rank risks for technical and non-technical audiences.

  Microsoft Defender, Tenable, Prisma Cloud, Security Copilot, AWS, Azure

• 19d

  Senior Cloud Security & DevSecOps Engineer

  Toronto, ON

  

  Capgemini

  6+ YOECandidates need 6+ years of experience, strong AWS skills plus working knowledge of Azure or GCP, and hands-on experience with Terraform, Ansible, Docker, Kubernetes, Jenkins and Azure DevOps. Cloud security, IAM, scripting and compliance frameworks such as PCI DSS, SOC 2, ISO 27001 and CIS are also required.

  AWS, Azure, Terraform, Ansible, Docker, Kubernetes

• 20d

  Chief Information Security Officer (CISO) / Directeur de la sécurité de l'information

  Remote in Canada

  Remote

  

  Insurity: Insurity is a leading provider of cloud-based software for insurance carriers, brokers, and MGAs.

  8+ YOEExecutive security leadership experience; Knowledge of HIPAA, SOC 2, ISO 27001, GDPR, NIST; Ability to lead major incidents and crisis response

  Cybersecurity, Computer science, Computer technology, Data protection, Implement ICT recovery system, Incident response

• 23d

  Senior Cybersecurity Test Engineer

  Ottawa, ON

  Contract

  

  Myticas Consulting

  8+ YOECandidates need 8+ years in cybersecurity testing, application security or penetration testing, with hands-on cloud security testing in AWS, Azure or GCP. Strong knowledge of threat modeling, IAM and API security, plus clear technical reporting, is required.

  Burp Suite, OWASP ZAP, Nessus, Qualys, Fortify, Checkmarx

• 23d

  Digital Product Manager (Security Platforms)

  Toronto, ON

  $104k–$154k/yrRemoteFull Time

  

  Allstate

  5+ YOEAu moins 5 ans d'expérience en gestion de produits numériques et de backlog; Au moins 1 an de mentorat auprès de gestionnaires de produits; Solide compréhension de la sécurité, du SDLC sécurisé et du DevSecOps

  Jira, Azure DevOps, VersionOne, Postman, Figma, Mural

• 23d

  Digital Product Manager (Security Platforms)

  Remote in Canada

  $104k–$154k/yrRemoteFull Time

  AI

  Allstate Insurance Company of Canada - Permanent

  5+ YOEAu moins 5 ans d'expérience en cadrage et gestion de backlog de produits numériques; Au moins 1 an comme coach de gestionnaires de produits; Solide compréhension des principes de sécurité, du SDLC sécurisé et du DevSecOp

  Jira, Azure DevOps, VersionOne, Postman, Mural, Figma

• 24d

  Principal Product Manager

  Waterloo, ON

  

  Open Text Corporation: OpenText is a leading Cloud and AI company that provides organizations around the world with a comprehensive suite of Business AI, Business Clouds,…

  4+ YOECandidates need 4 to 8 years of product management experience, ideally in cybersecurity, AppSec or enterprise software. They need hands-on knowledge of DAST, web application security and vulnerability management, plus practical AI knowledge and experience in Agile delivery.

  WebInspect, SC DAST, Fortify

• 24d

  Senior Cybersecurity Engineer

  Calgary, AB

  Full Time

  

  Blackline Safety

  7+ YOECandidates need at least 7 years of cybersecurity or technical experience with hands-on engineering work. They should know Microsoft security, Active Directory, cloud and network security, and scripting for security automation.

  Microsoft Defender XDR, Entra ID, Active Directory, Azure, AWS, PowerShell

• 25d

  Security Engineering Team Lead

  Canada

  E

  ESO

  5+ YOECandidates need at least 5 years of securing software or infrastructure in cloud platforms, plus network, firewall, SIEM and vulnerability management experience. Full authorization to work in Canada is required, as no visa sponsorship is offered.

  Microsoft Azure, AWS, GCP, SIEM, WAF, firewalls

• 25d

  Assistant Vice President, Information Security

  Toronto, ON

  

  First National Financial: First National Financial LP is one of Canada's largest non-bank lenders, originating and servicing both residential and commercial mortgages.

  12+ YOECandidates need 12 or more years of cybersecurity or technology risk experience, including several years leading security teams or major enterprise programs. They should have experience advising executives during cyber incidents, strong technical knowledge of security operations and cloud security, and working knowledge of ISO 27001, NIST CSF, SOC controls, Zero Trust and PIPEDA.

  Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID, Microsoft Purview, Microsoft Intune, GRC platforms

• 26d

  Application Security Engineer - ADR

  Toronto, ON

  $120k–$203k/yrFull Time

  S

  SSB&T

  6+ YOECandidates need several years of software development and application security experience, including hands-on work with ADR, WAAP, or RASP tools and the OWASP Top 10. A bachelor's degree in IT, computer science or a related field with 6 years of relevant experience is preferred, and CISSP, GCIH, GWAPT or Security+ certifications are valued.

  Kubernetes, Terraform, Ansible, Azure, AWS

• 26d

  Senior Manager, JSOC & Threat Hunting

  Toronto, ON

  

  Questrade Financial Group: Questrade offers Canadians an easy way to invest in securities and foreign currency and provides online wealth management and mortgage through the…

  10+ YOECandidates need 10+ years of cybersecurity experience, including hands-on incident response, SIEM and detection engineering, and security operations leadership. Experience with regulated financial environments and regulator incident reporting is expected.

  Elastic Security, Zscaler, SAST tools, DAST tools, EASM platform, CTI platform

  26d

  Senior Release Engineer

  Toronto, ON

  

  Questrade Financial Group: Questrade offers Canadians an easy way to invest in securities and foreign currency and provides online wealth management and mortgage through the…

  5+ YOECandidates need 5+ years of software or DevOps experience, including 3+ years in release engineering. They also need hands-on skills with GitLab CI, CircleCI or Jenkins, Google Cloud Platform, Apigee and Terraform, plus scripting in Python, Bash or Go.

  GitLab CI, CircleCI, Jenkins, GCP, Apigee, Terraform

• 27d

  Application Security Engineer

  Remote in Canada

  RemoteFull Time

  

  VGS

  3+ YOECandidates need 3-5+ years of Application Security or full stack development experience, including secure code review of Java and Python applications. Hands-on work with SAST and DAST tools in CI/CD, bug bounty operations and STRIDE threat modeling are also required, along with strong communication skills.

  GitHub Advanced Security, GitLab, Semgrep, Veracode, Synopsys, ZAP

• 27d

  Security Software Engineer

  Canada

  Hybrid

  

  Motive

  5+ YOECandidates need 5+ years in software or security engineering, strong Python, Go or JavaScript skills, and experience with OAuth, identity platforms, OWASP Top 10 remediation and AWS security. Familiarity with Docker, Kubernetes and secrets management is expected.

  AWS, Docker, Kubernetes

• 28d

  Senior Application Security Researcher

  Toronto, ON

  RemoteFull Time

  

  CommIT: Commit is a global tech services company with offices in Israel, US, Canada, UK, and Europe.

  5+ YOECandidates need 5+ years in offensive security, vulnerability research or application security, strong Python or Go coding, and a master's degree in computer science or a related field. Hands-on experience with LLMs, cloud and CI/CD, and clear written communication are also required.

  Python, Go, Kubernetes, BigQuery, SQL, CI/CD pipelines

• 28d

  Application Security Researcher

  Toronto, ON

  RemoteFull Time

  

  OX Security

  5+ YOECandidates need an M.Sc. in a related field and 5+ years of offensive security or application security experience. They must code in Python or Go, know web and API vulnerabilities, and have hands-on experience with LLMs for security tasks.

  Kubernetes, BigQuery, SQL, CI/CD pipelines, containers

• 29d

  DevOps

  Toronto, ON

  $110k–$135k/yrFull Time

  

  Altis

  5+ YOECandidates need 5+ years in systems administration, DevOps or cloud infrastructure, with hands-on CI/CD, Infrastructure as Code and DevSecOps experience. Strong knowledge of AWS, identity and access management, Kubernetes, Docker and Linux is also needed.

  Jenkins, GitHub, Terraform, Ansible, AWS, Kubernetes

• 29d

  Senior Software Engineer - Infrastructure Security (Remote)

  Remote in Canada

  RemoteFull Time

  

  Quora

  Candidates need software engineering skills plus deep expertise in at least one area: cloud infrastructure security (especially AWS and Terraform), security automation in CI/CD, or Linux and container security. Availability during Quora's coordination hours, Mon-Fri 9am-3pm Pacific Time, is required.

  AWS, Terraform, CloudFormation, Kubernetes, OSQuery, eBPF

• 29d

  Principal Application Security Specialist

  Vancouver, BC

  Full Time

  

  Global Relay: Global Relay is a leading provider of end-to-end compliance solutions for the global financial sector and other highly regulated industries.

  8+ YOECandidates need 8+ years in application security testing and DevSecOps, expert knowledge of software security, and hands-on skill with scripting and CI/CD tools. Strong communication skills for technical and non-technical audiences are also required.

  Git, Jenkins, Docker, Kubernetes, SAST tools, DAST tools

• 29d

  Staff Product Security Engineer, Reviews

  Toronto, ON

  

  Okta

  Candidates need deep experience in manual code review, penetration testing and secure development, plus strong knowledge of authentication protocols such as OIDC, SAML and OAuth. Experience assessing LLM and AI-integrated software and scripting in Python is required.

  Python, Java, Go, Bash, SAST tools, DAST tools

21 companies