NavitasPartners - 680 Jobs
Brampton, ON
Posted today
Job Details:
Full-time
Experienced
Application Security Engineer (AppSec) – BFSI
Location: Greater Toronto Area, Ontario
About the RoleWe are seeking an Application Security Engineer to secure enterprise banking, insurance, payments, and customer-facing digital applications through secure development and DevSecOps practices.
IMPORTANT NOTE – BFSI EXPERIENCE REQUIREDCandidates must possess experience securing applications within Banking, Financial Services, Insurance, Capital Markets, Payments, Lending, or FinTech environments.
Experience protecting customer financial information and transaction systems is required.
Candidates without BFSI experience will not be considered.
Responsibilities- Conduct secure code reviews and application security assessments.
- Perform SAST, DAST, API security testing, and dependency analysis.
- Support threat modeling and secure architecture reviews.
- Implement secure SDLC and DevSecOps practices.
- Assist development teams with remediation activities.
- Develop application security standards and controls.
- 5+ years of Application Security experience.
- Strong knowledge of OWASP Top 10 and Secure SDLC.
- Experience with Checkmarx, Veracode, Fortify, Snyk, or similar tools.
- Experience securing APIs and cloud-native applications.
- BFSI experience required.
- CSSLP
- GWAPT
- CISSP
For more details reach at [email protected]
Share This Job:
Frequently Asked Questions
This position is located in the Greater Toronto Area, Ontario, with Brampton, ON listed as the location.
Candidates must have BFSI experience, securing applications in Banking, Financial Services, Insurance, Capital Markets, Payments, Lending, or FinTech environments.
Responsibilities include secure code reviews and application security assessments, performing SAST/DAST/API security testing, supporting threat modeling and secure architecture reviews, implementing secure SDLC/DevSecOps practices, assisting remediation, and developing security standards and controls.
Required qualifications include 5+ years in Application Security, strong knowledge of OWASP Top 10 and Secure SDLC, and experience with tools like Checkmarx, Veracode, Fortify, or Snyk, plus experience securing APIs and cloud-native applications.
Preferred certifications include CSSLP, GWAPT, and CISSP.
The posting indicates details for an active role, with a contact email for resumes, but does not specify hiring status beyond listing the position.
Interested applicants should send resumes to [email protected] for more details and application submission.
