“Semgrep” jobs in Canada

No matching filters. Try another name.

Results

• 4d

  Information Security Engineer (DevSecOps)

  Toronto, ON

  HybridFull Time

  

  Equinix LLC: Equinix (Nasdaq: EQIX) is the world’s digital infrastructure company®, enabling digital leaders to harness a trusted platform to bring together and…

  4+ YOECandidates need 4 to 5 years in application security or DevSecOps, with hands-on use of SAST, SCA, secret scanning, DAST, threat modeling, GitHub Actions and Terraform. Knowledge of OWASP standards and cloud security is also required.

  Snyk, SonarQube, Semgrep, Burp Suite, Apiiro, Traceable

• 14d

  Senior Application Security Engineer

  Vancouver, BC

  $130k–$150k/yrHybridFull Time

  

  Spring Financial Inc.: Spring Financial is a leading financial technology company that provides all Canadians with simplified money solutions to help build credit, save…

  5+ YOE2+ MgmtSpring Financial needs 5+ years in application or security engineering, including 2+ years leading security initiatives. Candidates need deep knowledge of web and cloud security, the OWASP Top 10, threat modeling, CI/CD security integration, and automated security testing tools.

  Snyk, GitHub Advanced Security, Burp Suite, Semgrep, Checkov, AWS

  29d

  Application Security Engineer II

  Vancouver, BC

  $85k–$115k/yrHybridFull Time

  

  Spring Financial Inc.: Spring Financial is a leading financial technology company that provides all Canadians with simplified money solutions to help build credit, save…

  3+ YOESpring Financial needs 3+ years in application or software security, solid knowledge of OWASP Top 10 and cloud security, and code review skills in a modern language. Candidates should have threat modeling experience (STRIDE or PASTA), hands-on tuning of tools like Snyk, Semgrep or Burp Suite, and knowledge of OAuth/OIDC, JWT, Vault and AWS IAM.

  Snyk, GitHub Advanced Security, Burp Suite, Semgrep, Checkov, AWS IAM

• 16d

  Application Security Engineer

  Remote in Canada

  RemoteFull Time

  ?

  Working knowledge of common vulnerability classes (OWASP Top 10) and secure SDLC practices; Basic scripting ability (Python preferred) for automating repetitive tasks; Strong attention to detail and ability to manage a…

  Regulatory compliance, Documentation, Python, Attention to detail, CI/CD

• 17d

  Security Engineer

  Toronto, ON

  RemoteFull Time

  

  Mysten Labs

  3+ YOECandidates need 3+ years in security engineering or application security with real vulnerability findings, strong web application security knowledge, and skill in Rust, TypeScript, Python or Move. Interest in web3 is required, and a bachelor's degree or equivalent experience is needed.

  Endor Labs, GitHub, CodeQL, Semgrep

• 22d

  Software Engineer, Enterprise Security

  Remote in Canada

  Remote

  

  Warp

  5+ YOECandidates need 5+ years of professional software engineering experience, including building security-sensitive enterprise features like SSO, RBAC, permissions systems or audit logging. They also need strong security judgment, product sense and the ability to lead ambiguous technical work as a senior individual contributor.

  IDE, Docker, Software development, Data protection, Security regulations, Communication skills

• 24d

  Senior Release Engineer

  Toronto, ON

  

  Questrade Financial Group: Questrade offers Canadians an easy way to invest in securities and foreign currency and provides online wealth management and mortgage through the…

  5+ YOECandidates need 5+ years of software or DevOps experience, including 3+ years in release engineering. They also need hands-on skills with GitLab CI, CircleCI or Jenkins, Google Cloud Platform, Apigee and Terraform, plus scripting in Python, Bash or Go.

  GitLab CI, CircleCI, Jenkins, GCP, Apigee, Terraform

• 25d

  Application Security Engineer

  Remote in Canada

  RemoteFull Time

  

  VGS

  3+ YOECandidates need 3-5+ years of Application Security or full stack development experience, including secure code review of Java and Python applications. Hands-on work with SAST and DAST tools in CI/CD, bug bounty operations and STRIDE threat modeling are also required, along with strong communication skills.

  GitHub Advanced Security, GitLab, Semgrep, Veracode, Synopsys, ZAP

• 29d

  Application Security Engineer

  Toronto, ON

  On-siteFull Time

  

  Opendoor

  Candidates need application security or software engineering experience with a security focus, strong coding skills in Python, Go, TypeScript or Ruby, and hands-on use of security scanning tools. They also need knowledge of API vulnerabilities, threat modeling, and cloud and Kubernetes security.

  GitHub Advanced Security, Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Apollo GraphQL

• 29d

  Staff Product Security Engineer

  Ontario

  RemoteFull Time

  

  DataRobot, Inc.

  8+ YOECandidates need 8+ years in information security, mostly in product security or AppSec, plus deep knowledge of FedRAMP, NIST 800-53 and the DoD Cloud SRG. They must write Python or Go, understand Linux containers well, and have hands-on experience with Semgrep, Trivy and Burp Suite. A bachelor's or master's degree in a related field, or equivalent experience, is required.

  Semgrep, Trivy, Burp Suite, Kubernetes, Python, Go

9 companies