Application Security Analyst Ii

We are hiring an Application Security Analyst II, Information Security
**Reporting To**: Application Security Manager
**Full-Time/Part
- Time**: Full-time
**Posting Date**: June 16, 2025
**Closing Date**: July 4, 2025
**Hours of Work**: 8:30 a.m. - 5:00 p.m.
**Grade**: 12.4
**Office Location**: Toronto, ON Great location Steps away from the main public transit station
**What we offer**:
Highly competitive compensation package which includes base salary, bonus, benefits, and career advancement opportunities
- Eligibility for benefits is dependent on the terms of employment

**The Opportunity**:
**How you will contribute**:

- Analyzing and documenting processes, policies, controls, and standards to comply with security frameworks and regulations.
- Understand technical and architectural issues from a security perspective and provide recommendations.
- Performing security reviews and provide insights throughout all phases of software development.
- Support the Application Security Manager in managing internal and external stakeholders related to Application Security.
- Managing and coordinating secure code reviews with stakeholders, encompassing Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST).
- Reviewing the configurations to Web Application Firewalls (WAF)
- Assisting in the evaluation, selection, onboarding, and management of AppSec vendors and Solutions

**The experience you need**:

- Proficiency in manual and automated penetration testing methods/tools (e.g., Burp Suite, Fortify, Backtrack Kali, Metasploit Framework)
- Knowledge of programming languages (.Net, C#, JavaScript, etc.), cloud platforms (e.g., Azure), and database technologies in the security domain
- Familiarity with WAF technologies, security frameworks (OWASP-TOP 10, SANs-TOP 25, CWE), and participation in Bug Bounties & Capture the Flag (CTF) would be beneficial.

**Transferable Skills**:

- Excellent verbal communication
- Excellent written skills for preparing reports and briefings.
- Excellent analytical reasoning
- Problem-solving approach

**Education**:

- Post-secondary education, University education and Technical Certifications required.
- Certifications and Skills:

- Good to have Offensive Security Certified Professional (OSCP)

**Working Environment and Physical Demands Analysis**:

- Office environment
- Periods of high volume with tight timelines
- Long periods of stationary position/sitting
- Prolonged periods of repetitive movement (i.e. using a keyboard and mouse)
- Long periods of time in viewing a computer screen
- Multi-tasking may include speaking to customers on a telephone call while looking up information on a computer program.

Why join First National?
- Competitive Compensation
- Comprehensive benefits program (i.e., Health Spending Account, Maternity and Parental Leave Top Up)
- Hybrid working environment.
- Extensive training programs to set our employees up for success
- Modern office environment conducive to collaboration
- Supportive teamwork culture
- Opportunities to give back to the communities and work through events focused on a variety of charities
- Ongoing social events throughout the year

**The team you’ll join**:
Founded in 1988, First National is one of Canada’s largest non-bank lenders. We provide residential mortgages exclusively through the mortgage broker channel and we are Canada’s largest commercial mortgage lender.
First National has been consistently recognized as a great place to work and we are proud that our employee engagement feedback is higher than our industry partners.
First National is proud to be an equal opportunity employer and is committed to diversity and inclusion regardless of race, color, religion, national origin, age, gender identity, physical or mental disability, sexual orientation and any other category protected by law.
FNLOON