Application Security Analyst, Information Security

3 weeks ago

Toronto, Canada First National Full time

We are hiring an Application Security Analyst, Information Security

The Role:

We're seeking an Application Security Analyst well-versed in risk analysis, vulnerability assessment methodologies, and information security concepts. Your role involves supporting security risk assessments for both internally developed and third-party/open-source software, setting up security processes, and educating various application teams within the organization. You'll be integral in documenting and developing security controls while ensuring compliance with established frameworks.

Reporting To:

Application Security Manager

Full-Time/Part- Time:

Full-time

Posting Date:

March 5, 2024

Closing Date:

April 5, 2024

Hours of Work:

8:30 – 5:00

Grade:

Office Location:

Toronto, ON

Great location Steps away from the main public transit station

What we offer:

Highly competitive compensation package which includes, base salary, bonus, benefits, and career advancement opportunities

*Eligibility for benefits is dependent on the terms of employment

What you will do:

Analyzing and documenting processes, policies, controls, and standards to comply with security frameworks and regulations. Understand technical and architectural issues from a security perspective and provide recommendations. Performing security reviews and provide insights throughout all phases of software development. Support the Application Security Manager in managing internal and external stakeholders related to Application Security. Managing and coordinating secure code reviews with stakeholders, encompassing Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST). Conducting application vulnerability assessments for web, mobile, webservices and cloud applications Performing or overseeing manual/automated application Vulnerability Assessment & Penetration Testing, and subsequently managing technical documentation including VAPT/Application Security tracking and reporting Reviewing the configurations to Web Application Firewalls (WAF) Work closely with the application development delivery teams to integrate security controls within the development pipeline ensuring an efficient development process with early security control gates. Assisting the Security Leadership in collaborating with IT Groups to define, develop, communicate, and implement a comprehensive long-term application security roadmap. This involves creating threat models for web applications and supporting development teams across the agile Software Development Life Cycle (SDLC). Assisting in the evaluation, selection, onboarding, and management of AppSec vendors and Solutions

The Requirements Needed: 

Strong grasp of application design and architecture Proficiency in manual and automated penetration testing methods/tools (, Burp Suite, Fortify, Backtrack Kali, Metasploit Framework) Knowledge of programming languages (.Net, C#, JavaScript, etc.), cloud platforms (, Azure), and database technologies in the security domain Familiarity with WAF technologies, security frameworks (OWASP-TOP 10, SANs-TOP 25, CWE), and participation in Bug Bounties & Capture the Flag (CTF) would be beneficial.

Transferable Skills:

Excellent verbal communication Excellent written skills for preparing reports and briefings. Excellent analytical reasoning Problem-solving approach

Education:

• Post-secondary education, University education and Technical Certifications required.

• Certifications and Skills:

Preference will be given to candidates to have CISSP. Good to have Offensive Security Certified Professional (OSCP)

The team you will join:

Founded in 1988, First National is one of Canada’s largest non-bank lenders. We provide residential mortgages exclusively through our mortgage broker channel and service commercial clients through our national origination team of empowered advisors.

At First National, It’s in our Nature is our rallying cry. It underlies our values, beliefs, and how we show up for each other, our clients, our partners and the community. Our nature defines who we are and guides every decision we make.

First National is proud to be an equal opportunity employer and is committed to diversity and inclusion regardless of race, color, religion, national origin, age, gender identity, physical or mental disability, sexual orientation or any other category protected by law.

First National supports requests for accommodation from applicants with disabilities; please contact Human Resources at .

We would like to thank all applications for their interest, but only candidates selected for an interview will be contacted.

#FNLOON

  • Senior Information Security Analyst

    3 weeks ago

    Old Toronto, Canada Security Bank & Trust Co. Full time

    Our client, a major post-secondary institution, is looking to bolster their security program with the addition of two Senior Security Analysts. The main focus of the role will be to work alongside leadership in managing the program as a whole. Your input will be instrumental in the further development of their program.Experience1. Minimum 5 years of...

  • Senior Information Security Analyst

    3 weeks ago

    Old Toronto, Canada Security Bank & Trust Co. Full time

    Our client, a major post-secondary institution, is looking to bolster their security program with the addition of two Senior Security Analysts. The main focus of the role will be to work alongside leadership in managing the program as a whole. Your input will be instrumental in the further development of their program.Experience1. Minimum 5 years of...

  • IT Security Analyst

    3 weeks ago

    Old Toronto, Canada Security Bank & Trust Co. Full time

    Must Have Skills/Requirements: 1)   10+ years of Experience as an IT Security Analyst 2)   A strong understanding of multi-tier Web Applications, web API, and related vulnerabilities and potentials threats. Staying abreast of information provided by recognized organizations such as OWASP (Open Web Application Security Project) and CVE (Common...

  • IT Security Analyst

    3 weeks ago

    Old Toronto, Canada Security Bank & Trust Co. Full time

    Must Have Skills/Requirements: 1)   10+ years of Experience as an IT Security Analyst 2)   A strong understanding of multi-tier Web Applications, web API, and related vulnerabilities and potentials threats. Staying abreast of information provided by recognized organizations such as OWASP (Open Web Application Security Project) and CVE (Common...

  • IT Security Analyst

    1 week ago

    Old Toronto, Ontario, Canada Security Bank & Trust Co. Full time

    Must Have Skills/Requirements:1) 10+ years of Experience as an IT Security Analyst2) A strong understanding of multi-tier Web Applications, web API, and related vulnerabilities and potentials threats. Staying abreast of information provided by recognized organizations such as OWASP (Open Web Application Security Project) and CVE (Common Vulnerabilities and...

  • Application Security Analyst, Information Security

    2 months ago

    Toronto, Canada First National Financial Full time

    We are hiring an Application Security Analyst, Information Security! **The Role**: **Reporting To**: Application Security Manager **Full-Time/Part - Time**: Full-time **Posting Date**: March 5, 2024 **Closing Date**: April 5, 2024 **Hours of Work**: 8:30 a.m. - 5:00 p.m. **Grade**: 12.4 **Office Location**: Toronto, ON Great location! Steps away from the...

  • Application Security Analyst, Information Security

    2 days ago

    Toronto, Canada First National Financial Full time

    We are hiring an Application Security Analyst, Information Security! **The Role**: **Reporting To**: Application Security Manager **Full-Time/Part - Time**: Full-time **Posting Date**: March 5, 2024 **Closing Date**: April 5, 2024 **Hours of Work**: 8:30 a.m. - 5:00 p.m. **Grade**: 12.4 **Office Location**: Toronto, ON Great location! Steps away from the...

  • Application Security Analyst, Information Security

    1 week ago

    Toronto, Ontario, Canada First National Financial Full time

    We are hiring an Application Security Analyst, Information SecurityThe Role:Reporting To: Application Security Manager**Full-Time/Part Time**: FulltimePosting Date: March 5, 2024Closing Date: April 5, 2024Hours of Work: 8:30 a.m. - 5:00 p.m.Grade: 12.4Office Location: Toronto, ON Great location Steps away from the main public transit stationWhat we...

  • Information Security Analyst

    1 week ago

    Toronto, Ontario, Canada 2i Solutions, Inc Full time

    We are thrilled to present an outstanding 1 year contract opportunity for an accomplished Information Security Analyst (SOC Analyst) based in London, Ontario. This is a Fully remote role Must haves: 5+ years of IT operations experience with progressive responsibilities. 3+ years information security or other IT infrastructure security experience. If you...

  • Information Security Analyst

    1 week ago

    Toronto, Ontario, Canada CB Canada Full time

    Information Security Analyst On behalf of our client in the Banking Sector, PROCOM is looking for an Information Security Analyst. Information Security Analyst – Job Description Manage assigned security platforms, following clients' procedures if required, which includes: Device health and availability monitoring Device health incident resolution and...

  • Information Security Analyst

    2 months ago

    Toronto, Canada CB Canada Full time

    Information Security Analyst On behalf of our client in the Banking Sector, PROCOM is looking for an Information Security Analyst. Information Security Analyst – Job Description Manage assigned security platforms, following clients' procedures if required, which includes: Device health and availability monitoring Device health incident resolution and...

  • Information Security Analyst

    3 weeks ago

    Toronto, Canada CB Canada Full time

    Information Security Analyst On behalf of our client in the Banking Sector, PROCOM is looking for an Information Security Analyst. Information Security Analyst – Job Description Manage assigned security platforms, following clients' procedures if required, which includes: Device health and availability monitoring Device health incident resolution and...

  • Information Security Analyst

    2 months ago

    Old Toronto, Canada Canadian Investment Regulatory Organization Full time

    40 Temperance Street Suite 2600 Toronto, ON M5H0B4, CAN DescriptionPosition Title: Information Security AnalystDepartment:Information TechnologyLocation:TorontoStatus: Permanent Full-time (Hybrid)The Information Security Analyst will implement the information security program initiatives, administer information security systems, and assist with...

  • Information Security Analyst

    2 months ago

    Old Toronto, Canada Canadian Investment Regulatory Organization Full time

    40 Temperance Street Suite 2600 Toronto, ON M5H0B4, CAN DescriptionPosition Title: Information Security AnalystDepartment:Information TechnologyLocation:TorontoStatus: Permanent Full-time (Hybrid)The Information Security Analyst will implement the information security program initiatives, administer information security systems, and assist with...

  • Information Security Analyst

    1 week ago

    Old Toronto, Ontario, Canada Canadian Investment Regulatory Organization Full time

    40 Temperance Street Suite 2600 Toronto, ON M5H0B4, CAN DescriptionPosition Title: Information Security AnalystDepartment:Information TechnologyLocation:TorontoStatus: Permanent Full-time (Hybrid)The Information Security Analyst will implement the information security program initiatives, administer information security systems, and assist with...

  • Information Security Analyst

    2 months ago

    Old Toronto, Canada Canadian Investment Regulatory Organization Full time

    40 Temperance Street Suite 2600 Toronto, ON M5H0B4, CAN DescriptionPosition Title: Information Security AnalystDepartment:Information TechnologyLocation:TorontoStatus: Permanent Full-time (Hybrid)The Information Security Analyst will implement the information security program initiatives, administer information security systems, and assist with...

  • Information Security Analyst

    1 month ago

    Toronto, Canada Toyota North America Full time

    Description Information Security Analyst About Toyota Financial Services Toyota Financial Services (TFS) provides retail, leasing and wholesale financial services to Toyota and Lexus dealerships and customers across Canada. TFS is a member of Toyota Financial Services Corporation (TFSC), a wholly owned subsidiary of Toyota Motor Corporation in...

  • Information Security Analyst

    3 weeks ago

    Toronto, Canada Toyota North America Full time

    Description Information Security Analyst About Toyota Financial Services Toyota Financial Services (TFS) provides retail, leasing and wholesale financial services to Toyota and Lexus dealerships and customers across Canada. TFS is a member of Toyota Financial Services Corporation (TFSC), a wholly owned subsidiary of Toyota Motor Corporation in...

  • Information Security Analyst

    4 weeks ago

    Toronto, Canada Toyota Full time

    Job Description - Information Security Analyst - About Toyota Financial Services - Toyota Financial Services (TFS) provides retail, leasing and wholesale financial services to Toyota and Lexus dealerships and customers across Canada. TFS is a member of Toyota Financial Services Corporation (TFSC), a wholly owned subsidiary of Toyota Motor Corporation in...

  • Security Dispatcher

    2 months ago

    Toronto, Canada Paragon Security Full time

    **Position**: Full Time, Permanent - Security Dispatcher - **Location**:Toronto Downtown - **Schedule**: 12 hours Continental Days Schedule - **Hours**: 36 to 48 hours per week or 84 hours biweekly - **Salary**: $18 per hour **Qualifications**: - **Valid Ontario Security Guard License**: - **Minimum 1 year of Security Guard or Dispatcher experience in...