Senior Application Security Engineer
2 months ago
We are a leading financial services provider committed to making decisions easier and lives better for our customers and colleagues around the world. From our environmental initiatives to our community investments, we lead with values throughout our business. To help us stand out, we help you step up, because when colleagues are healthy, respected and meaningfully challenged, we all thrive. Discover how you can grow your career, make impact and drive real change with our Winning Team today.
Working Arrangement
Hybrid
Job Description
Your Opportunity
- We are looking for an experienced and highly motivated Senior Application Security Engineer to join Manulife's Global Wealth and Asset Management Application Security team. The role will push forward GWAMs Cross-Enterprise application security vision by creating guidance and mechanisms that enable the company to think firm-wide when considering capabilities development. You'll work closely with business, product, and technology partners to translate long-term objectives into designs that fuel firm-wide reuse and convergence.
- As an Application Security Engineer, you will work closely with our GWAM IT Risk and Cybersecurity teams in improving the maturity of the practices within third-party and originally developed software solutions.
- Our Manulife / John Hancock family is going through an exciting, yet challenging metamorphosis. We are transforming from a wise 130-year-old company into an agile 130-year-young company. This is a journey, and to quote T.S. Elliot; "The journey, Not the destination matters...". On this journey, we expect all to bring their knowledge, skills and experience as a team and, when we don't know, we will learn.
- Within the Manulife family, our team is within Global Wealth and Asset Management and as a division we believe the truth is in the numbers. We believe it's time to change the investment game. To do it differently by focusing on the value we bring our clients, rather than on the usual topics of performance and fees. We have just surpassed $1 trillion in assets under management with a diverse range of both public and private asset classes. Our division is global and have operations in North America, Asia and Europe and we serve a diverse range of clients from our own on-balance general account assets to institutional, retail and wealth.
- The right individual will be a proactive, self-starter that enjoys and thrives when connecting people and technology to solve sophisticated problems at-scale. You will analyze, model, and develop sophisticated and high-level architecture plans that require the integration of multiple technologies and coordination of functional areas across the organization. If you have a passion and skill for long-term end-to-end thinking balanced with crafting architecture increments that enable value for customers now, this opportunity is for you
- The Application Security team within the Enterprise Architecture and Risk organization is responsible for defining the application security building blocks and capabilities to embed cross-enterprise application security and optimize how security integrated into the SDLC. We are an organization that values diverse and big thinking, rewards both behaviors and delivery, and focuses on growth and continuous improvement – all in support of Manulife's mission to help clients and one another succeed. This role is a unique opportunity to join a team and company at the beginning of a multi-year platform transformation whose work will have direct impact on company direction, our customers, and our industry.
What you're good at
- Collaborating with Product, Risk, Cyber and Technology teams to craft secure application security programs and patterns that enables business and technology vision.
- Understand sophisticated modern and legacy integrations and business information models to ensure integrity and a strong security profile
- Enterprise security and specifically developing large enterprise solutions with respect to developing security controls, methods to mitigate security risks
- Designing for both functional and non-functional qualities, including availability, resiliency, security, privacy, etc.
- Assisting the business in the scoping and planning of upcoming initiatives and roadmap items
- Implementing application security practice including threat modeling, risk assessment, application security to ensure the non-functional requirements are identified, and controls/requirements are required to mitigate these risks.
- Reviewing, advising, and providing feedback on security within and outside the team
- Developing reference implementation patterns related to security solutions.
- Helping to develop new and revising security governance (secure design reviews) processes to ensure alignment of a diverse set of technology projects with the enterprise target state vision.
- Connecting your business and technical insights to develop innovative proposals for evolving Manulife's platforms, introducing new products or capabilities, or improving processes that benefit the firm or its customers.
What you have
- 5+ years Application Security Engineer experience
- Ability to analyze the information flow and recommend appropriate technology to support the business process.
- Experience enabling and actively guiding others on application security tools including Static Analysis (SAST), Dynamic Analysis (DAST), OSS (Open-source vulnerabilities).
- Experience in reviewing security design of business applications and proposing countermeasure to address risk
- Experience in providing application security support to developers.
- Experience with Dev Sec Ops and securing different CD/CI pipelines using different types of security tools.
- Experience and knowledge of security functions (AuthN, AuthZ, Transport Security, Secure Configuration, Data validation/sanitizations,security exceptions logging).
- Hands-on experience in application and system penetration testing and code reviewing.
- Experience with Threat modeling, secure development lifecycle and secure testing methodologies
- Knowledge of Vault capabilities and Security Incident and Event management systems
- Ability to evaluate new technologies and know the latest industry trends.
- Good judgment and the ability to handle high pressure situations.
- Knowledge of the enterprise security space: languages, frameworks (e.g. OWASP Top 10, NIST CSF), techniques, and industry trends.
- Ability (and preference) to work in an Agile environment.
- Refined presentation and communication skills and expertise interfacing and communicating effectively with both engineers and executives.
- Security Certification preferred (CISSP, CISM, OSCP, etc.)
What can we offer you?
- A competitive salary and benefits packages.
- A growth trajectory that extends upward and outward, encouraging you to follow your passions and learn new skills.
- A focus on growing your career path with us.
- Flexible work policies and strong work-life balance.
- Professional development and leadership opportunities.
Our commitment to you
- Values-first cultureWe lead with our Values every day and bring them to life together.
- Boundless opportunityWe create opportunities to learn and grow at every stage of your career.
- Continuous innovationWe invite you to help redefine the future of financial services.
- Delivering the promise of Diversity, Equity and InclusionWe foster an inclusive workplace where everyone thrives.
- Championing Corporate CitizenshipWe build a business that benefits all customers and has a positive social and environmental impact.
About Manulife and John Hancock
Manulife Financial Corporation is a leading international financial services group that helps people make their decisions easier and lives better. With our global headquarters in Toronto, Canada, we operate as Manulife across our offices in Asia, Canada, and Europe, and primarily as John Hancock in the United States. We provide financial advice, insurance, and wealth and asset management solutions for individuals, groups and institutions. At the end of 2022, we had more than 40,000 employees, over 116,000 agents, and thousands of distribution partners, serving over 34 million customers. At the end of 2022, we had $1.3 trillion (US$1.0 trillion) in assets under management and administration, including total invested assets of $0.4 trillion (US $0.3 trillion), and segregated funds net assets of $0.3 trillion (US$0.3 trillion). We trade as 'MFC' on the Toronto, New York, and the Philippine stock exchanges, and under '945' in Hong Kong.
Manulife is an Equal Opportunity Employer
At Manulife /John Hancock , we embrace our diversity. We strive to attract, develop and retain a workforce that is as diverse as the customers we serve and to foster an inclusive work environment that embraces the strength of cultures and individuals. We are committed to fair recruitment, retention, advancement and compensation, and we administer all of our practices and programs without discrimination on the basis of race, ancestry, place of origin, colour , ethnic origin, citizenship, religion or religious beliefs, creed, sex (including pregnancy and pregnancy-related conditions), sexual orientation, genetic characteristics, veteran status, gender identity, gender expression, age, marital status, family status, disability, or any other ground protected by applicable law.
It is our priority to remove barriers to provide equal access to employment. A Human Resources representative will work with applicants who request a reasonable accommodation during the application process . All information shared during the accommodation request process will be stored and used in a manner that is consistent with applicable laws and Manulife/John Hancock policies . To request a reasonable accommodation in the application process, contact .
Salary & Benefits
The annual base salary for this role is listed below.
Primary Location
Toronto, Ontario
Salary range is expected to be between
$92,190.00 CAD - $171,210.00 CAD
If you are applying for this role outside of the primary location, please contact for the salary range for your location. The actual salary will vary depending on local market conditions, geography and relevant job-related factors such as knowledge, skills, qualifications, experience, and education/training. Employees also have the opportunity to participate in incentive programs and earn incentive compensation tied to business and individual performance.
Manulife offers eligible employees a wide array of customizable benefits, including health, dental, mental health, vision, short- and long-term disability, life and AD&D insurance coverage, adoption/surrogacy and wellness benefits, and employee/family assistance plans. We also offer eligible employees various retirement savings plans (including pension and a global share ownership plan with employer matching contributions) and financial education and counseling resources. Our generous paid time off program in Canada includes holidays, vacation, personal, and sick days, and we offer the full range of statutory leaves of absence. If you are applying for this role in the U.S., please contact for more information about U.S.-specific paid time off provisions.
-
Software Engineer II, Platform Security
2 months ago
Toronto, Ontario, Canada Abnormal Security Full timeAbout The RoleAbnormal Security is looking for a Software Engineer II who is a solid software developer with a strong interest in Security & Privacy to join the Platform Security team. The Platform Security team owns the Security and Privacy platform services and infrastructure to uphold industry standards for the company's security posture and customer data...
-
Senior Application Security Engineer
2 weeks ago
Toronto, Ontario, Canada Wealthsimple Full timePosition Overview:Wealthsimple is at the forefront of transforming financial management and is seeking skilled professionals to enhance its team. As Canada's leading fintech firm, Wealthsimple is committed to delivering clear and affordable financial solutions to over 3 million clients, managing assets exceeding $30 billion. The organization prioritizes...
-
Senior Application Security Engineer
2 weeks ago
Toronto, Ontario, Canada Wealthsimple Full timePosition Overview:Wealthsimple is at the forefront of transforming financial management and is seeking skilled professionals to enhance their team. As Canada's leading fintech organization, Wealthsimple is committed to delivering clear and affordable financial solutions to over 3 million clients, managing assets exceeding $30 billion. The company prioritizes...
-
Senior Application Security Engineer
2 weeks ago
Toronto, Ontario, Canada Wealthsimple Full timePosition Overview:Wealthsimple is at the forefront of transforming financial management and is seeking skilled professionals to enhance their workforce. As Canada's leading fintech firm, Wealthsimple is committed to delivering clear and affordable financial solutions to over 3 million clients, managing assets exceeding $30 billion. The organization...
-
Senior Application Security Engineer
2 weeks ago
Toronto, Ontario, Canada Wealthsimple Full timePosition Overview:Wealthsimple is on a mission to transform the way we handle finances and is seeking skilled professionals to enhance their team. As Canada's leading fintech firm, Wealthsimple is committed to delivering clear and affordable financial solutions to over 3 million clients, managing assets exceeding $30 billion. The organization prioritizes...
-
Senior Application Security Engineer
2 weeks ago
Toronto, Ontario, Canada Wealthsimple Full timePosition Overview:Wealthsimple is on a mission to transform financial management and is seeking skilled professionals to enhance their team. As Canada's leading fintech organization, Wealthsimple is committed to delivering clear and affordable financial solutions to over 3 million clients, managing assets exceeding $30 billion. The company champions teamwork...
-
iOS Application Security Engineer
2 weeks ago
Toronto, Ontario, Canada Theorem, LLC Full timeTheorem, LLC iOS Application Security Engineer Role In the role of iOS Application Security Engineer at Theorem, LLC, you will play a crucial part in refining our scanning technology to systematically evaluate iOS applications and detect security and privacy vulnerabilities autonomously. Your responsibilities will include: Collaborating with the mobile...
-
Application Security Engineering Lead
2 weeks ago
Toronto, Ontario, Canada Robinhood Full timeAbout the CompanyRobinhood Markets is a pioneering fintech organization committed to making financial markets accessible to everyone. Our focus is on empowering customers by lowering barriers and enhancing access to financial information. We are dedicated to developing products and services that facilitate participation in the financial...
-
Application Security Engineering Lead
2 weeks ago
Toronto, Ontario, Canada Robinhood Full timeAbout the CompanyRobinhood Markets is a pioneering fintech organization committed to making financial markets accessible to everyone. Our mission centers around empowering customers by breaking down barriers and enhancing access to financial information. We are dedicated to developing innovative products and services that foster a financial ecosystem in...
-
Application Security Engineering Lead
2 weeks ago
Toronto, Ontario, Canada Robinhood Full timeAbout the OpportunityAt Robinhood, we are committed to making financial markets accessible to everyone. Our mission is to empower individuals with the tools and resources necessary to participate in the financial system.Position OverviewWe are in search of an Application Security Engineering Manager who is dedicated to fostering secure application...
-
Senior Security Solutions Engineer
2 weeks ago
Toronto, Ontario, Canada Twilio Full timeDiscover Your Future at Twilio We are excited to welcome a new Senior Security Solutions Engineer to our team. About Us & Our Mission Twilio is at the forefront of real-time communication and data solutions, empowering businesses and developers globally to create superior applications and enhance customer interactions. With a global presence spanning...
-
Senior Application Security Engineer
2 weeks ago
Toronto, Ontario, Canada Wealthsimple Digital Assets Inc. Full timeBecome a vital member of the Application Security & Posture Management team at Wealthsimple Digital Assets Inc.Envision a workplace where your professional journey flourishes, and your financial aspirations are attainable. Welcome to Wealthsimple, a pioneering company committed to transforming the way we handle finances. With an emphasis on clarity and...
-
Senior Cloud Security Engineering Manager
7 hours ago
Toronto, Ontario, Canada CLIO Full timeAbout the RoleWe are seeking a highly experienced Senior Cloud Security Engineering Manager to join our team at CLIO. As a key member of our engineering leadership team, you will be responsible for leading our cloud security engineering efforts and ensuring the security and integrity of our cloud-based systems.Key ResponsibilitiesCollaborate with...
-
Senior Machine Learning Engineer
1 week ago
Toronto, Ontario, Canada Abnormal Security Full timeAbout The RoleAbnormal Security is looking for a Senior Machine Learning Engineer to join the Message Detection Decisioning team. At Abnormal, we protect our customers against nefarious adversaries who are constantly evolving their techniques and tactics to outwit and undermine the traditional approaches to Security. That's what makes our novel...
-
Senior Security Operations Engineer
2 weeks ago
Toronto, Ontario, Canada Peoples Trust Full timeJob Details Overview About Us: Peoples Group is a distinguished Financial Institution with a rich history in the Canadian market, dedicated to delivering exceptional service and deep product expertise. Our commitment is to surpass client expectations through our core values: Strength-Based, Relationship-focused, and Passionate Execution. We believe...
-
Senior FIPS Security Software Engineer
2 weeks ago
Toronto, Ontario, Canada Extreme Networks Full timeSenior FIPS Security Software Development EngineerJoin Extreme Networks in a pivotal role within the wireless security domain. As a vital member of our team, you will play a key role in fortifying the security and resilience of our premier products. Collaborate with experienced professionals to enhance various commercial solutions in the growing security...
-
Senior Cloud Security Operations Engineer
2 weeks ago
Toronto, Ontario, Canada Highbrow LLC Full timePosition Overview: As a Senior Cloud Security Operations Engineer at Highbrow LLC, you will play a crucial role in ensuring that our cloud infrastructure adheres to established security and compliance standards. Key Responsibilities: - Guarantee that all cloud implementations comply with internal security protocols and regulatory requirements. - Enhance...
-
Senior System Engineer
2 days ago
Toronto, Ontario, Ontario, Canada Resonaite Full timeOur client in the manufacturing sector is looking for a Senior Systems Engineer on a contract basis to work on their Security initatives.Duration: 6 monthsLocation: mainly remote, with some Toronto presence requiredResponsibilities:Identity Management: Manage and support identity management solutions, Identity Providers (IdP), and directory synchronization...
-
Privacy Security Engineering Lead
2 weeks ago
Toronto, Ontario, Canada Instacart Full timeOverview About the Role We are seeking a skilled Engineering Manager to become a vital part of our expanding Privacy Engineering division within the Security Engineering framework. The Engineering Manager will play a crucial role in advancing our privacy capabilities, which encompass managing access requests, processing data deletions, and safeguarding...
-
Lead Application Security Engineer for AWS
2 weeks ago
Toronto, Ontario, Canada Amazon Development Centre Canada ULC Full timeOverview:As a pivotal member of the AWS Security team, you will play a crucial role in safeguarding the AWS cloud ecosystem and our diverse clientele. Our team has been at the forefront of enabling innovative solutions since 2006, leveraging the power of cloud computing to transform traditional IT paradigms. Your Role:In this position, you will be tasked...