“SAST tools” jobs in Canada – Page 2

No matching filters. Try another name.

Results

• 14d

  Application Security & Secure SDLC Consultant

  Remote in Canada

  RemoteContract

  

  Querentia Inc.

  Candidates need strong application security and secure SDLC program experience, hands-on work with SAST, DAST and SCA tools, and knowledge of DevSecOps and CI/CD security. Strong stakeholder communication and facilitation skills are also required.

  SAST tools, DAST tools, SCA tools, CI/CD pipelines

  14d

  Senior DevSecOps & AI Security Engineer

  Toronto, ON

  Contract

  

  Querentia Inc.

  6+ YOECandidates need 6+ years in application security, DevSecOps, offensive security or security engineering, plus a relevant degree and 2-3 security certifications. Strong hands-on skills in penetration testing, secure code review, cloud-native and AI security, and Python are required.

  Azure, Kubernetes, GitHub, Python, SAST tools, DAST tools

• 17d

  Security Engineer

  Toronto, ON

  Full Time

  

  Varicent

  5+ YOEVaricent needs candidates with 5+ years in information security or security engineering, at least one security certification such as CISSP or CISA, and hands-on experience with cloud platforms and security tools like SIEM, WAF, DLP and EDR. Strong communication skills and the ability to make sound decisions with incomplete information are also required.

  SIEM, EDR, WAF, DLP, CASB, OneTrust

• 17d

  Senior Application Security Engineer

  Vancouver, BC

  $130k–$150k/yrHybridFull Time

  

  Spring Financial Inc.: Spring Financial is a leading financial technology company that provides all Canadians with simplified money solutions to help build credit, save…

  5+ YOE2+ MgmtSpring Financial needs 5+ years in application or security engineering, including 2+ years leading security initiatives. Candidates need deep knowledge of web and cloud security, the OWASP Top 10, threat modeling, CI/CD security integration, and automated security testing tools.

  Snyk, GitHub Advanced Security, Burp Suite, Semgrep, Checkov, AWS

• 17d

  Operational Developer (DevOps)

  Quebec

  Full Time

  C

  Centre

  3+ YOECandidates need a college or university IT diploma, at least 3 years of software development and systems administration experience, and hands-on DevSecOps experience. Strong English is essential and French is an asset.

  Azure DevOps, GitHub Actions, Terraform, Ansible, Docker, Kubernetes

• 18d

  AppSec Analyst

  Toronto, ON

  PP

  Patch & Permasearch

  5+ YOECandidates need 5+ years in application security or DevSecOps, hands-on work with Snyk, GitHub Advanced Security, JFrog and Akamai, and experience securing CI/CD pipelines. Working knowledge of AI security concepts and the ability to work across security, DevOps and development teams are also required.

  Snyk, GitHub Advanced Security, Dependabot, JFrog, Akamai, GitHub Actions

• 18d

  Snyk SME (Application Security Transformation Lead)

  Toronto, ON

  AN

  Astra North Infoteck Inc.

  10+ YOECandidates need 10+ years in application security, cybersecurity or DevSecOps, and 3+ years of hands-on Snyk work. They also need experience supporting regulated industries and security certifications such as CISSP, CSSLP or CEH.

  Snyk, Veracode

• 18d

  Intermediate Security Specialist

  Toronto, ON

  Contract

  

  Randstad Canada

  5+ YOECandidates need 5 to 8 years of cybersecurity experience, including hands-on work running exposure management or vulnerability programs. They must also have operated cloud security tools across both AWS and Azure and be able to rank risks for technical and non-technical audiences.

  Microsoft Defender, Tenable, Prisma Cloud, Security Copilot, AWS, Azure

• 19d

  Application Security Engineer

  Remote in Canada

  RemoteFull Time

  ?

  Working knowledge of common vulnerability classes (OWASP Top 10) and secure SDLC practices; Basic scripting ability (Python preferred) for automating repetitive tasks; Strong attention to detail and ability to manage a…

  Regulatory compliance, Documentation, Python, Attention to detail, CI/CD

• 20d

  Senior Penetration Tester

  Alberta +1

  RemoteFull Time

  FF

  Forward Financing: Forward Financing is a financial technology company based in Boston, Massachusetts with team members throughout the United States, Dominican…

  5+ YOECandidates need 5+ years in application, offensive or product security, hands-on pentesting and code review across web apps, APIs and AWS, and knowledge of AI/LLM attack surfaces such as prompt injection. They should code in Ruby, Python, TypeScript or Go, understand secure SDLC, and communicate risk clearly. A bachelor's degree in computer science or equivalent experience is typical.

  SAST tools, AWS

• 20d

  Senior Cloud Security & DevSecOps Engineer

  Toronto, ON

  

  Capgemini

  6+ YOECandidates need 6+ years of experience, strong AWS skills plus working knowledge of Azure or GCP, and hands-on experience with Terraform, Ansible, Docker, Kubernetes, Jenkins and Azure DevOps. Cloud security, IAM, scripting and compliance frameworks such as PCI DSS, SOC 2, ISO 27001 and CIS are also required.

  AWS, Azure, Terraform, Ansible, Docker, Kubernetes

• 21d

  Chief Information Security Officer (CISO) / Directeur de la sécurité de l'information

  Remote in Canada

  Remote

  

  Insurity: Insurity is a leading provider of cloud-based software for insurance carriers, brokers, and MGAs.

  8+ YOEExecutive security leadership experience; Knowledge of HIPAA, SOC 2, ISO 27001, GDPR, NIST; Ability to lead major incidents and crisis response

  Cybersecurity, Computer science, Computer technology, Data protection, Implement ICT recovery system, Incident response

• 24d

  Senior Cybersecurity Test Engineer

  Ottawa, ON

  Contract

  

  Myticas Consulting

  8+ YOECandidates need 8+ years in cybersecurity testing, application security or penetration testing, with hands-on cloud security testing in AWS, Azure or GCP. Strong knowledge of threat modeling, IAM and API security, plus clear technical reporting, is required.

  Burp Suite, OWASP ZAP, Nessus, Qualys, Fortify, Checkmarx

• 24d

  Digital Product Manager (Security Platforms)

  Toronto, ON

  $104k–$154k/yrRemoteFull Time

  

  Allstate

  5+ YOEAu moins 5 ans d'expérience en gestion de produits numériques et de backlog; Au moins 1 an de mentorat auprès de gestionnaires de produits; Solide compréhension de la sécurité, du SDLC sécurisé et du DevSecOps

  Jira, Azure DevOps, VersionOne, Postman, Figma, Mural

• 24d

  Digital Product Manager (Security Platforms)

  Remote in Canada

  $104k–$154k/yrRemoteFull Time

  AI

  Allstate Insurance Company of Canada - Permanent

  5+ YOEAu moins 5 ans d'expérience en cadrage et gestion de backlog de produits numériques; Au moins 1 an comme coach de gestionnaires de produits; Solide compréhension des principes de sécurité, du SDLC sécurisé et du DevSecOp

  Jira, Azure DevOps, VersionOne, Postman, Mural, Figma

• 25d

  Senior Cybersecurity Engineer

  Calgary, AB

  Full Time

  

  Blackline Safety

  7+ YOECandidates need at least 7 years of cybersecurity or technical experience with hands-on engineering work. They should know Microsoft security, Active Directory, cloud and network security, and scripting for security automation.

  Microsoft Defender XDR, Entra ID, Active Directory, Azure, AWS, PowerShell

• 26d

  Security Engineering Team Lead

  Canada

  E

  ESO

  5+ YOECandidates need at least 5 years of securing software or infrastructure in cloud platforms, plus network, firewall, SIEM and vulnerability management experience. Full authorization to work in Canada is required, as no visa sponsorship is offered.

  Microsoft Azure, AWS, GCP, SIEM, WAF, firewalls

• 26d

  AI Solutions Engineer (Senior / Principal)

  Toronto, ON

  HybridFull Time, Contract

  

  RAVL

  Candidates need hands-on Vertex AI and GKE or Cloud Run experience, plus strong DevSecOps platform skills. Senior candidates must also show they have led platform architecture and mentored engineers in regulated environments.

  Vertex AI, Gemini, Agent Builder, Vector Search, GKE, Cloud Run

• 26d

  Assistant Vice President, Information Security

  Toronto, ON

  

  First National Financial: First National Financial LP is one of Canada's largest non-bank lenders, originating and servicing both residential and commercial mortgages.

  12+ YOECandidates need 12 or more years of cybersecurity or technology risk experience, including several years leading security teams or major enterprise programs. They should have experience advising executives during cyber incidents, strong technical knowledge of security operations and cloud security, and working knowledge of ISO 27001, NIST CSF, SOC controls, Zero Trust and PIPEDA.

  Microsoft Sentinel, Microsoft Defender, Microsoft Entra ID, Microsoft Purview, Microsoft Intune, GRC platforms

• 26d

  Senior Application Security Engineer (SCA/SAST)

  Remote in Canada

  RemoteFull Time

  T

  Trimble

  5+ YOECandidates need five or more years in application security, deep experience with software composition analysis and static analysis at enterprise scale, and the ability to read code in languages such as Java, C#, Python and Go. A bachelor's degree or equivalent practical experience is also needed.

  GitHub Actions, Jenkins, Azure DevOps, GitLab CI

• 26d

  Application Security Engineer - ADR

  Toronto, ON

  $120k–$203k/yrFull Time

  S

  SSB&T

  6+ YOECandidates need several years of software development and application security experience, including hands-on work with ADR, WAAP, or RASP tools and the OWASP Top 10. A bachelor's degree in IT, computer science or a related field with 6 years of relevant experience is preferred, and CISSP, GCIH, GWAPT or Security+ certifications are valued.

  Kubernetes, Terraform, Ansible, Azure, AWS

• 27d

  Senior Manager, JSOC & Threat Hunting

  Toronto, ON

  

  Questrade Financial Group: Questrade offers Canadians an easy way to invest in securities and foreign currency and provides online wealth management and mortgage through the…

  10+ YOECandidates need 10+ years of cybersecurity experience, including hands-on incident response, SIEM and detection engineering, and security operations leadership. Experience with regulated financial environments and regulator incident reporting is expected.

  Elastic Security, Zscaler, SAST tools, DAST tools, EASM platform, CTI platform

  27d

  Senior Release Engineer

  Toronto, ON

  

  Questrade Financial Group: Questrade offers Canadians an easy way to invest in securities and foreign currency and provides online wealth management and mortgage through the…

  5+ YOECandidates need 5+ years of software or DevOps experience, including 3+ years in release engineering. They also need hands-on skills with GitLab CI, CircleCI or Jenkins, Google Cloud Platform, Apigee and Terraform, plus scripting in Python, Bash or Go.

  GitLab CI, CircleCI, Jenkins, GCP, Apigee, Terraform

• 28d

  Application Security Engineer

  Remote in Canada

  RemoteFull Time

  

  VGS

  3+ YOECandidates need 3-5+ years of Application Security or full stack development experience, including secure code review of Java and Python applications. Hands-on work with SAST and DAST tools in CI/CD, bug bounty operations and STRIDE threat modeling are also required, along with strong communication skills.

  GitHub Advanced Security, GitLab, Semgrep, Veracode, Synopsys, ZAP

22 companies