Senior Application Security Engineer

2 days ago

Remote, Canada Gaiia Full-time

Shape secure product development at gaiia as a Senior Security Engineer, applying threat modelling and application security across remote teams.

This senior, hands-on position protects customer-facing workflows and products through practical security engineering. You will review architecture, authentication, authorization, tenant isolation, and sensitive workflows across TypeScript-based services. The role also includes penetration testing, remediation, bug bounty ownership, and developer partnership.

Key Responsibilities:

  • Perform threat modelling and architecture reviews
  • Review authentication, authorization, and tenant isolation
  • Run internal penetration tests and label security issues
  • Partner with developers to implement effective remediations
  • Build and maintain a bug bounty program

Requirements:

  • At least five years in software or application security
  • Strong experience securing modern web applications and APIs
  • Experience with React, GraphQL, and distributed systems
  • Experience with penetration testing, bug bounty, and SAST
  • Ability to review architecture and identify practical security risks

Use application security, secure development, and communication skills to strengthen gaiia’s products and customer workflows.

#J-18808-Ljbffr