Specialist Application Security

2 months ago

Toronto, Canada David Joseph & Company Full time

JOB SUMMARY:

We are seeking a skilled Application Security Specialist with experience in secure coding practices, threat modelling, Static Application Security Testing (SAST), Software Composition Analysis (SCA), Dynamic Application Security Testing (DAST), and container security.

The ideal candidate will play a critical role in safeguarding our applications and services by implementing robust cyber security measures throughout the software development lifecycle.

Will provide expertise, guidance, advice, and operational support for the development, deployment and management of application security program to ensure the City is adequately protected from cyber security threats and to support the execution of the Chief Information Security Officer's (CISO) mandate, cyber vision and strategy.

Will design, configure and implement security systems to protect the City's computer networks from cyber attacks, and set and maintain security standards.

Will provide technical and advisory support and services to all City's divisions and Agencies and Corporations for Application Security.

MAJOR RESPONSIBILITIES:

  • Conduct Security Assessments: Perform regular security assessments, including vulnerability scanning, penetration testing, and code reviews, to identify and remediate potential security weaknesses.
  • Threat Modeling: Conduct comprehensive threat modeling exercises to identify, analyze, and prioritize potential security threats and risks in software applications. Utilize frameworks such as STRIDE or PASTA to systematically assess vulnerabilities.
  • Manage Security Tools: Utilize SAST, DAST, and SCA tools to analyze code and third-party components for vulnerabilities; oversee the implementation of automated security testing within CI/CD pipelines.
  • Container Security: Implement security measures for containerized applications, ensuring compliance with best practices for container security.
  • Collaboration: Work closely with development, operations, and IT teams to ensure that security measures are effectively integrated into all stages of application development and deployment.
  • Secure Coding Practices: Provide guidance on secure coding practices to development teams, ensuring that security is integrated into the application development process from the outset.
  • Research & Technical Advice: Work with senior specialists on complex projects, providing technical knowledge, research, proof-of-concepts, and support for cloud security (CASB), web application and API security (WAAP), securing AI systems, and others.
  • Cybersecurity Solution Configuration and Advice: Assist Sr. Specialists in developing and implementing detailed cybersecurity configuration plans/designs, based on specific program requirements. Provide recommendations on improvements to business processes and security practices.
  • Project Support & Collaboration: Collaborate on cybersecurity projects, ensuring effective communication, high work standards, and organizational performance. Provide input and support to project teams, including scheduling, reviewing work, and contributing to project execution.
  • Emerging Technology & Risk Management: Stay up to date with cybersecurity trends, risks, and technologies. Participate in security strategy reviews and the evaluation, implementation and configuration of technical solutions, while helping assess cybersecurity needs of business strategies.
  • Contract & Document Preparation: Support in preparing RFPs, Statements of Work, and other contractual documents. Help ensure cybersecurity-related expenditures remain within budget.


QUALIFICATIONS/CERTIFICATIONS:

  • Education: Bachelor’s degree in Computer Science, Information Technology, or a related field.
  • Experience: Proven experience in application security (minimum three years)
  • Certifications: Relevant certifications such as CISSP, CEH, OSCP or equivalent are highly desirable.
  • Technical Skills:
    • Proficient in secure coding practices across multiple programming languages (e.g., Java, C#, Python).
    • Strong understanding of application vulnerabilities (OWASP Top Ten) and mitigation strategies.
    • Experience with SAST, DAST, SCA tools and threat modeling methodologies.
    • Familiarity with container orchestration platforms (e.g., Kubernetes) and their security best practices.

SOFT SKILLS:

  • Excellent analytical and problem-solving skills.
  • Strong communication skills to effectively collaborate with cross-functional teams.
  • Ability to work independently in a fast-paced environment while managing multiple priorities.
  • Ability to work in transformative program
  • Highly organized, proactive, self-motivated team player who takes initiatives and is able to work independently

ADDITIONAL COMMENTS/INFORMATION:

A normal work week is 35 hours; however, unforeseen situation may require extended hours of work with little or no prior notice. In case of a cyber incident or breach, rotation shift, continuous extended hours may be required with little or no prior notice.

*Subject to a police check, background check, psychological assessment and/or any other checks on a regular basis as the Office of the CISO handles highly sensitive and confidential information.

  • Retail Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada Paladin Security Full time

    Job OverviewWe are seeking a highly skilled and experienced Retail Security Specialist to join our team at Paladin Security.

  • Enterprise Application Security Specialist

    1 day ago

    Old Toronto, Canada Natural Factors Full time

    Role OverviewWe are seeking a highly skilled Enterprise Application Security Specialist to join our team. This role will be responsible for providing technical execution and expertise in application security tools for global business and development teams.

  • Communications Security Specialist

    3 weeks ago

    Toronto, Ontario, Canada Communications Security Establishment Full time

    Job SummaryWe are seeking a highly skilled Communications Security Specialist to join our team at the heart of Canada's national security and intelligence community.About the RoleThis exciting opportunity is part of our multi-functional teams responsible for delivering vital COMSEC services to Government of Canada agencies, international partners, and...

  • Forensic Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada Paladin Security Full time

    About the RoleWe are seeking a skilled Forensic Security Specialist to join our team at Paladin Security. In this role, you will be responsible for ensuring the safety and security of our clients and their facilities.Key ResponsibilitiesMonitor CCTV/Security Alarms 24/7Operate the Security Command CentreRespond to Fire Alarm SystemMonitor Temperature...

  • Security Specialist

    6 months ago

    Greater Toronto Area, Canada Melcour Security Full time

    **About us** We are experienced, professional, and agile, and our goal is to Provide best in Class Security Solutions to all of our Customers. Our work environment includes: - Modern office setting - Growth opportunities Join our team as a Security Specialist and play a crucial role in providing our customers with reliable and quality installation while...

  • Luxury Condo Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada Condor Security Full time

    Job Summary:Condor Security is seeking a highly skilled and customer-focused individual to fill the role of Luxury Condo Security Specialist. This position will be responsible for providing exceptional service to residents and guests in a high-end condominium environment.About the Role:Deliver hotel-style front desk service, ensuring a positive and welcoming...

  • Security Talent Acquisition Specialist

    7 days ago

    Toronto, Ontario, Canada acre security Full time

    Acre security is a dynamic and forward-thinking company at the forefront of innovation in access control, visitor management, and intrusion software. As a Security Talent Acquisition Specialist, you will play a crucial role in identifying and hiring top-tier technical talent to drive our growth and success.The estimated salary for this position is $85,000 -...

  • Chief Application Security Specialist

    4 weeks ago

    Old Toronto, Canada Glassdoor Full time

    Glassdoor is a leading platform for workplace conversations, and we're committed to making worklife better for everyone. As a key member of our team, you'll play a vital role in shaping the future of application security.Company OverviewWe're on a mission to give professionals the tools they need to succeed. Our platform empowers users to connect...

  • Security Specialist

    4 weeks ago

    Old Toronto, Canada West Egg Security Full time

    Job Summary:West Egg Security is seeking a highly skilled and experienced Security Specialist to lead our Respite Sites team. As a key member of our security team, you will be responsible for providing advanced security services, ensuring the safety of everyone on site, and working closely with City of Toronto staff and Shelter staff.Key...

  • Security Officer

    3 weeks ago

    Toronto, Ontario, Canada Paladin Security Full time

    Are you a customer-focused individual with excellent communication skills? Do you thrive in dynamic environments and enjoy providing exceptional service to others? We are seeking a Security Officer - Customer Service Specialist to join our team at Shops at Don Mills in North York, Ontario.About the Role:We are looking for a detail-oriented and organized...

  • Forensic Security Specialist

    4 weeks ago

    Toronto, Ontario, Canada Paladin Security Full time

    **Job Summary:**Paladin Security is seeking a skilled and detail-oriented Security Guard to join our team at the Forensic Services and Coroner's Complex.As a Security Guard, you will be responsible for providing a safe and secure environment for staff, visitors, and clients.Key Responsibilities:Patrolling the facility and surrounding areas to prevent and...

  • Security Dispatch Specialist

    4 weeks ago

    Toronto, Ontario, Canada Paladin Security Full time

    Job OverviewWe are seeking a highly skilled Security Dispatch Specialist to join our team at North York General Hospital. As a key member of our security operations, you will play a vital role in ensuring the safety and well-being of patients, visitors, and staff.

  • Protection Specialists Wanted

    4 weeks ago

    Toronto, Ontario, Canada SafeTech Security Full time

    We are seeking Protection Specialists at SafeTech Security. As a protection specialist, you will have the opportunity to work with a comprehensive security solutions provider and utilize your skills in protecting people and property.About UsAt SafeTech Security, we pride ourselves on providing high-quality security solutions. Our team of experts is dedicated...

  • Application Security Solutions Specialist

    5 days ago

    Toronto, Canada RBC Full time

    Job SummaryThe RBC Application Security team is driving multiple complex enterprise-wide initiatives to enhance the security and quality of our applications. As a key member, you will provide technical expertise in application security tools for global RBC business and development teams. Your primary role will be to serve as a liaison between security and...

  • Data Security Professional

    3 weeks ago

    Toronto, Ontario, Canada Communications Security Establishment Full time

    Company OverviewThe Communications Security Establishment (CSE) is a Canadian government agency responsible for protecting the country's communications and information systems from cyber threats. As a data security professional, you will play a critical role in ensuring the security of Canada's communication infrastructure.Salary InformationWe offer a...

  • Condominium Security Specialist

    3 weeks ago

    Toronto, Ontario, Canada Knights On Guard Security Full time

    Company OverviewKnights On Guard Security is a reputable security company in Ontario, committed to providing exceptional service and ensuring the safety of our clients.Salary:$55,000 - $65,000 per year, depending on experience.Job Description:We are seeking a skilled Security Guard to join our team at a high-end condominium site in North York. As a...

  • Sales Specialist

    6 months ago

    Toronto, Canada Vancouver Fire & Radius Security Full time

    **Security Sales Specialist** Are you looking for: - A growing professional **FAMILY-RUN** business that cares about you as a person? (you’re not just a number to us) - A solution you are **PROUD** to sell? - Ability to be a **TRAIL BLAZER**, build a **LEGACY **in a developing market, and have the **AUTONOMY** to grow that market (_with the support of...

  • Application Administrator

    6 months ago

    Toronto, Canada Security Compass Full time

    As Application Administrator, you'll be reporting to the director of the IT Application Team. You will work collaboratively with this team to support our internal customers, share knowledge, and learn different areas of our highly integrated environment. Your work will allow you to grow your knowledge and skills while having a lasting impact on the company's...

  • Applications Specialist

    6 months ago

    Toronto, Canada Stikeman Elliott Full time

    We're looking for an Application Specialist to join our team in Toronto. In this technical support role, you'll be responsible for a broad range of tasks, primarily related to our document management system (DMS), iManage. You will work closely with the IT Security, Application Support, and Service Desk teams to provide proactive and reactive support for...

  • Applications Specialist

    6 months ago

    Toronto, Canada Stikeman Elliott LLP Full time

    We’re looking for an Application Specialist to join our team in Toronto. In this technical support role, you’ll be responsible for a broad range of tasks, primarily related to our document management system (DMS), iManage. You will work closely with the IT Security, Application Support, and Service Desk teams to provide proactive and reactive support for...