Staff Application Security Developer

6 months ago


Toronto, Canada Wealthsimple Full time
Your career is an investment that grows over timeWealthsimple is on a mission to help everyone achieve financial freedom by reimagining what it means to manage your money. Using smart technology, we take financial services that are often confusing, opaque and expensive and make them transparent and low-cost for everyone. We’re the largest fintech company in Canada, with over 3 million users who trust us with more than $30 billion in assets.Our teams ship often and make an impact with groundbreaking ideas. We're looking for talented people who keep it simple and value collaboration and humility as we continue to create inclusive and high-performing teams where people can be inspired to do their best work.About the Application Security & Posture Management team:At Wealthsimple, we value our customers' trust above all. Our Application Security Team is dedicated to protecting this trust by ensuring the utmost security of our applications and customer data.In close collaboration with development teams, we integrate security measures and practices into every stage of our Software Development Lifecycle. We also partner with them to build secure features and capabilities into our products. Our proactive efforts are focused on identifying and mitigating risks within our applications, ensuring solutions are both timely and scalable.Our mission extends beyond securing systems; we aim to safeguard our customers' trust, reinforcing Wealthsimple's position as the most trusted company in the world. We also cultivate a strong security culture throughout the company, empowering all employees to uphold and advocate for our high security standards.

We’re looking for someone who will:

Build security tooling, automations and processes to integrate security into the Software Development Lifecycle with developer experience in mind. Examples include SAST, SCA, Secrets Detection, Nuclei, Input Validation modules, and or GraphQL Security controls. Conduct security assessments and threat model application designs and solutions. Audit source code and perform code reviews for critical application changes. Provide hands-on vulnerability remediation guidance to developers. Design and implement attack scenarios to simulate real-world threats, allowing us to uncover any potential weaknesses in our systems and infrastructure. Engage in detection engineering to identify and analyze potential threats and attacks. Develop threat detection logic and response processes for applicable datasets. Respond to alerts as needed. Keep up-to-date with the latest security trends, tools, and techniques to continuously enhance the security posture of the organization. You will research and evaluate emerging threats and vulnerabilities, and provide recommendations for improving our security practices, further enhancing security within Wealthsimple. Provide guidance and mentorship. You will share your knowledge and experience to help develop the skills and expertise of fellow team members and essentially, help grow our team. Collaborate with development teams to build security features and capabilities into our products that enhance customer trust.

We're looking for someone who:

Has proficiency developing Ruby on Rails applications. Is able to reason through JavaScript, Python & Java/Kotlin code bases which are languages used in some of our support services. Understands and can identify and propose fixes for application security gotchas such as those listed in OWASP Top 10. Possesses an offensive security mindset. You wonder and ask what could go wrong. Is comfortable with digging into logs using tools such as SQL and SIEM. Is able to clearly and effectively communicate, internally and externally, security best practices and strategy. Is an effective listener, consensus builder and effectively incorporates diverse ideas into a coherent vision. Why Wealthsimple? Competitive Salary with top-tier health benefits and life insurance Retirement savings matching plan using Wealthsimple Work 20 vacation days per year and unlimited sick and mental health days Up to $1500 per year towards wellness and professional development budgets respectively  90 days away program: Employees can work internationally in eligible countries for up to 90 days per calendar year  A wide variety of peer and company-led Employee Resource Groups (ie. Rainbow, Women of Wealthsimple, Black @ WS) Company-wide wellness days off scheduled throughout the yearWe’re a remote-first team, with over 1000 employees coast to coast in North America. Be a part of our Canadian success story and help shape the financial future of millions — join usRead our Culture Manual and learn more about how we work. DEI Statement At Wealthsimple, we are building products for a diverse world and we need a diverse team to do that successfully. We strongly encourage applications from everyone regardless of race, religion, colour, national origin, gender, sexual orientation, age, marital status, or disability status.  Accessibility Statement Wealthsimple provides an accessible candidate experience. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know, and we will work with you to provide the necessary support and make reasonable accommodations to facilitate your participation. We are continuously working to improve our accessibility practices and welcome any feedback or suggestions on how we can better accommodate candidates with accessibility needs.

  • Toronto, Canada Xideral North America Inc Full time

    This is a remote position. We are looking for an Application Security Specialistfor an exciting new role! Location: remote position butcandidates need to be based in Montreal or Toronto Duration: One year contract Start date: As soon as possible Main Responsibilities: Conduct indepth analysis of software components todetect security...


  • Old Toronto, Canada Robinhood Full time

    About the team + role The Security Tooling team’s mission is to ensure the reliability, scalability and availability of critical third party security software that Robinhood depends on.As a Staff Applications Engineer, you will be responsible for planning, designing, implementing, and maintaining company security SaaS applications and tools. This includes...


  • Toronto, Ontario, Canada Wealthsimple Full time

    Wealthsimple Security Developer Job DescriptionAbout WealthsimpleWealthsimple is a fintech company that helps individuals achieve financial freedom by reimagining money management. Our mission is to make financial services transparent, low-cost, and accessible to everyone.About the Application Security TeamThe Application Security Team at Wealthsimple is...


  • Toronto, Canada RBC Full time

    Job Summary Job Description The Application Security team is undertaking multiple complex enterprise-wide initiatives to improve the security and quality of RBC applications. In this role, you will provide technical execution and expertise in the area of application security tools for the global RBC business and application development teams across all...


  • Toronto, Canada RBC Full time

    Job SummaryJob Description The Application Security team is undertaking multiple complex enterprise-wide initiatives to improve the security and quality of RBC applications. In this role, you will provide technical execution and expertise in the area of application security tools for the global RBC business and application development teams across all...


  • Toronto, Canada CLIO Full time

    A day in the life might look like: Developing, coding, and implementing tools to help developers avoid security flaws Conducting research proactively to detect new attack vectors Building partnerships with development teams and advising on security best practices  Driving security awareness and knowledge amongst the product organization ...


  • Toronto, Ontario, Canada AMEX Full time

    **About Wayfair Inc.**Wayfair is one of the world's largest online destinations for the home, offering an extensive selection of products across various categories.As a Cybersecurity Expert for Secure Application Development, you will play a crucial role in safeguarding our digital presence and ensuring the security of our applications.**Job Description:**We...


  • Toronto, Ontario, Canada David Joseph & Company Full time

    Job Title: Cybersecurity Expert for Secure Application DevelopmentAbout Us:David Joseph & Company is seeking a highly skilled Cybersecurity Expert to join our team. As a key member of our organization, you will play a critical role in ensuring the security and integrity of our applications.Estimated Salary: $120,000 - $180,000 per year, depending on...

  • Door Staff/security

    5 months ago


    Toronto, Canada Americana Security Services Full time

    Duties include checking IDs, crowd management, and access control. Security licence required, smart serve an asset. Please include a description of your previous bar security experience. **Job Type**: Part-time Pay: $25.00 per hour Expected hours: 10 - 25 per week Flexible Language Requirement: - French not required Schedule: - Every Weekend -...


  • Toronto, Canada Staff Shop Full time

    Calling all Business Development powerhouses with a passion for forging strategic partnerships! Are you on the lookout for a new and invigorating chapter in your professional journey? Want to flourish in an environment that pulsates with vitality and take the lead in sculpting a values-driven, results-based sales approach on a team that offers freedom for...

  • Security Supervisor

    6 months ago


    Toronto, Canada Paladin Security Full time

    Security Supervisor - The Michener Institute - Full Time **Position**: Security Supervisor **Site**: The Michener Institute **City**: 222 St. Patrick Street, Toronto **Status**: Full Time **Hours**:Monday to Friday (0700-1500) **Pay Rate**: $18.50/hr Are you interested in starting a career in a fast paced and growing industry? As a provider of security...


  • Toronto, Ontario, Canada First National Full time

    Company Overview:First National is a leading non-bank lender in Canada, providing mortgage and commercial services through a national origination team.The Role:We're seeking an Application Security Professional to support our Information Security team. The successful candidate will have a strong grasp of application design and architecture, with proficiency...


  • Toronto, Canada Paladin Security Full time

    Security Contract Manager - Cortellucci Vaughan Hospital The Contract Manager is to be the liaison between Cortellucci Vaughan Hospital l and Paladin Security Group in Vaughan ON, ensuring all contractual obligations is met while acting on the behalf of the Security Department. - Quality Control - Maintain Training Records - Continue to adapt and innovate...


  • Toronto, Ontario, Canada Paladin Security Full time

    OverviewPaladin Security is a leading provider of security services, dedicated to making the world a safer and friendlier place. We are seeking an experienced Site Director to oversee the day-to-day operations of our site at 15/16 York Street in Downtown Toronto.Salary: $24.97 per hour (based on full-time days, Monday to Friday)Job DescriptionAs a Site...

  • Security Guard

    6 months ago


    Toronto, Canada Logixx Security Inc Full time

    A **Tactical Security Guard** will act as the first-line representative to all staff, customers, and clients. A major part of the role involves deterring and protecting the retail brand and staff. **Duties**: - Responsible for the protection of people, property, facilities, and information - Maintain surveillance of surrounding area and report suspicious...

  • Bar Security

    2 days ago


    Toronto, Canada Skyview Security Full time

    SKYVIEW SECURITY is looking for Well experienced and dedicated **Bar Security Guards** to join our exciting, hard-working, and growing team! **Must have** a Valid Ontario Security Guard License and a Smart Serve certificate. Must have **2 years of bar/club security experience.** These positions require a minimum of 2 year security experience...


  • Toronto, Canada David Joseph & Company Full time

    JOB SUMMARY:We are seeking a skilled Application Security Specialist with experience in secure coding practices, threat modelling, Static Application Security Testing (SAST), Software Composition Analysis (SCA), Dynamic Application Security Testing (DAST), and container security. The ideal candidate will play a critical role in safeguarding our applications...

  • Full Time

    6 months ago


    Toronto, Canada Paladin Security Full time

    Full Time - Days - Security Coordinator - Bridgepoint Hospital **Position**: Security Coordinator **Site**: Bridgepoint Hospital **City**: 1 Bridgepoint Dr, Toronto **Status**: Full-Time **Hours**:Monday to Friday - 0800-1600 **Pay Rate**: $28 Are you interested in starting a career in a fast paced and growing industry? As a provider of security...


  • Toronto, Ontario, Canada David Joseph & Company Full time

    Job Summary:We are seeking a highly skilled Application Security Expert to join our team at David Joseph & Company. As an Application Security Expert, you will play a critical role in safeguarding our applications and services by implementing robust cybersecurity measures throughout the software development lifecycle.Key Responsibilities:Conduct security...


  • Toronto, Canada CNSS Security Full time

    **THIS JOB MAY REQUIRE YOU MAKE ARRESTS**: - ***ACCESS CONTROL** CNSS Security is a high-profile security company providing top-quality protection services. Working closely with our shift team leader, our staff is responsible for maintaining a secure environment for clients, staff, and visitors of numerous high-value clients and their property. As a CNSS...