46 application security engineer jobs at 30 companies in Lockport, NY

PromotedHiringCafe
Founding Backend / Infra Engineer
Cupertino, CA, US
$160k-$300k/yr On-SiteFull Time
HiringCafe
HiringCafe: Building a 100× better job search engine to take on Indeed and LinkedIn.
Own the crawlers, pipelines, and infrastructure powering a real-time job search engine. Strong Node.js and Python fundamentals; bonus points for security and reverse-engineering chops.
Node.js, Python, Elasticsearch, Redis
1mo
Save
Mark Applied
Hide
Application Security Engineer
Toronto, Ontario, Canada
HybridFull Time
Opendoor
OpendoorNASDAQ: OPEN: Online platform for buying and selling residential real estate.
5+ YOE5+ years application security or security-focused software engineering; strong in Python, Go, TypeScript, or Ruby; experience with AppSec tooling (GitHub Advanced Security, Semgrep, HackerOne, Burp); cloud and Kubernetes security experience; practical threat modeling skills.
Go, Python, TypeScript, Ruby, Terraform, AWS, GCP, Azure, Kubernetes, Apollo GraphQL, GitHub Advanced Security, CodeQL, Dependabot, Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Claude, OpenAI, MCP, GitHub, Linear, Slack
2w
Save
Mark Applied
Hide
Application Security Developer
Toronto or Vancouver or Calgary or Canada
$117k-$158k/yr HybridFull Time
Clio
Clio: Cloud-based legal practice management software and AI solutions.
Experience in application/product security and offensive testing, vulnerability identification and remediation, threat modeling, proficiency in at least one language (Python, .NET, Ruby, JavaScript), cloud security (AWS/Azure/GCP), and common app-security tools.
Python, .NET, Ruby, JavaScript, AWS, Azure, GCP, Burp Suite, SAST, SCA, SIEM, ELK, Ruby on Rails, Puppet, Kubernetes, Terraform, Elastic, Logtash, Kibana
1mo
Save
Mark Applied
Hide
Application Security Engineer
Toronto, Ontario, Canada
$105-$115/yr HybridFull Time
HelloFresh
HelloFreshFrankfurt Stock Exchange: HFG: Global meal kit delivery service and food solutions provider.
2+ YOEProficiency in Python or Go; 2+ years security experience; exposure to Terraform, Docker, container management, CI/CD, and secrets management; experience designing security controls; familiarity with agile, Jira, and Slack.
Python, Go, Terraform, Docker, CI/CD, Jira, Slack
2mo
Save
Mark Applied
Hide
Senior Security Engineer, Application Security
Bellevue or Menlo Park or New York or Toronto
$146k-$220k/yr HybridFull Time
Robinhood
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
5+ YOE5+ years in application security or related field; experience with secure SDLC and threat modeling; production-grade Python/Go experience; collaboration with engineers; reliability and incident response focus.
Python, Go
2w
Save
Mark Applied
Hide
Lead Application Security Engineer
Toronto or St. John's or Montreal
$121k-$170k/yr HybridFull Time
Nasdaq
NasdaqNASDAQ: NDAQ: Operates global electronic marketplaces and provides financial technology services.
10+ YOE10+ years information security experience across on-prem and cloud, bachelor's in CS/IS or equivalent, active security certification (CISSP/CISA/CCSP/GIAC), hands-on app security/testing experience, strong risk communication skills.
Google Cloud
2mo
Save
Mark Applied
Hide
Senior Application Security Developer , AI Security
Toronto, Ontario, Canada
$101k-$149k/yr HybridFull Time
Autodesk
AutodeskNASDAQ: ADSK: Developing software for architecture, engineering, and entertainment industries.
5+ YOE5+ years in application security; strong OWASP knowledge; secure development practices; experience with AI/LLM security; scripting programming; CI/CD integration; clear communication.
Python, JavaScript, Go, Cursor, Claude, CI/CD, LLM, AI Security
1w
Save
Mark Applied
Hide
Senior Application Security Engineer (258939)
Toronto, Ontario, Canada
OnsiteFull Time
Scotiabank
ScotiabankToronto Stock Exchange: BNS: Provides global personal, commercial, and investment banking services.
5+ YOE5+ Mgmt5+ years AppSec and DevSecOps experience, expertise with application security tooling, containerization, cloud platforms, CI/CD pipelines, scripting, and strong communication and analytical skills.
SAST, DAST, SCA, SBOM, API security, secrets detection, CNAPP, Docker, Kubernetes, Azure, GCP, AWS, Python, PowerShell, Bash, Java, C#, .NET, Jenkins, BitBucket, Azure DevOps, GitHub Actions, Maven, Gradle, npm
1w
Save
Mark Applied
Hide
Senior Security Engineer
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yr RemoteFull Time
Later
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
1mo
Save
Mark Applied
Hide
Staff/Senior Engineer, Security
San Francisco or Toronto or United States or Canada
$180k-$260k/yr HybridFull Time
EvenUp
EvenUp: AI-powered document generation and analysis for personal injury law.
5+ YOE5+ years in security-focused engineering with hands-on architecture, SAST/DAST and CI/CD integration, cloud and application security, experience securing AI systems, strong scripting (Python) and relevant cybersecurity certification.
SAST, DAST, CI/CD, OWASP, JFrog, Snyk, SASE, CASB, RASP, Python, Ruby, Node.js, DNS-SEC
3w
Save
Mark Applied
Hide
Security Engineer
San Francisco or Palo Alto or Toronto or Los Angeles
OnsiteFull Time
HeyGen
HeyGen: Generate professional AI videos using digital avatars and voices.
Hands-on Python and AWS experience, cloud and application security, vulnerability management, IAM and secrets management, familiarity with SOC 2/ISO 27001, strong communication and threat modeling skills.
Python, AWS, Drata, Infisical, Bugcrowd, SOC 2, ISO 27001
5d
Save
Mark Applied
Hide
Principal Security Engineer
Toronto, Ontario, Canada
$220k-$280k/yr HybridFull Time
League
League: Provides an AI-powered healthcare consumer experience platform for enterprises.
8+ YOE8+ years security engineering experience; deep expertise in encryption/key management, IAM, cloud or application security; hands-on securing AI/LLM systems; regulated environment experience (HIPAA/PIPEDA/SOC2); strong cross-functional collaboration.
6d
Save
Mark Applied
Hide
Cyber Security Engineer
Toronto, Ontario, Canada
$142k-$160k/yr HybridFull Time
Momentum Financial Services Group
Momentum Financial Services Group: Provides alternative financial services and consumer lending products.
7+ YOE7+ years security engineering experience designing and operating enterprise security controls across endpoint, email, cloud, SIEM, application security, and certificate management.
Endpoint Detection & Response (EDR), Email Security Platforms, Secure Web Gateways (SWG), Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Security Posture Management (CSPM), AWS Security Services and Guardrails, SIEM, PKI/TLS, PowerShell, Python
3w
Save
Mark Applied
Hide
DevSecOps Engineer
Washington, D.C. or Sarasota or Miami or New York City or Toronto or Longboat Key
$165k-$195k/yr OnsiteFull Time
Rumble
RumbleNASDAQ: RUM: Video sharing platform and cloud infrastructure provider.
Experienced in DevSecOps/application or product security, SSDLC design and operation, CI/CD hardening, SAST/DAST/SCA and container scanning, Python/Go/TypeScript code review, Docker/Kubernetes, Vault, and secure supply chain practices.
OpenStack, Ceph, Python, Go, TypeScript, GitHub Actions, GitLab CI, Jenkins, SAST, DAST, SCA, secret scanning, container scanning, SBOM, Sigstore/cosign, SLSA, Docker, Kubernetes, Vault, OAuth2, OpenID Connect, Terraform, Ansible, STRIDE, PASTA, Rocky Linux, Ubuntu, OWASP Top 10
3w
Save
Mark Applied
Hide
Senior Security Consultant (Web Application Penetration Tester)
Toronto, Ontario, Canada
OnsiteFull Time
NetSPI
NetSPI: Provides proactive cybersecurity testing solutions and attack surface management.
3+ YOEBachelor's in IT/CS/Engineering/Math (or equiv), 3+ years penetration testing, familiarity with Kali/Burp/Metasploit/Nessus, OWASP and MITRE knowledge, OS internals, strong communication and mentoring skills, willing to travel 5-10%.
Kali Linux, Burp Suite, Metasploit, Nessus, OWASP Top 10, MITRE ATT&CK, Windows, Linux, macOS, Ruby, Python, Perl, C, C++, Java, C#
4w
Save
Mark Applied
Hide
Forward Deployed Engineer
Toronto or United States or Israel
HybridFull Time
Tenzai
Tenzai: Autonomous AI agents for continuous, enterprise-scale penetration testing.
3+ YOE3+ years in FDE/TAM/security consulting or enterprise architecture; strong enterprise infrastructure, hybrid-cloud, network and application security knowledge; familiarity with LLM/GenAI risks; elite communication; willing to travel monthly.
OWASP Top 10, LLM, RAG, GenAI, SOC, DevSecOps
3w
Save
Mark Applied
Hide
Senior Security Consultant (Web Application Penetration Tester)
Toronto, Ontario, Canada
OnsiteFull Time
NetSPI
NetSPI: Provides enterprise penetration testing and attack surface management services.
3+ YOEBachelor's (or equivalent) in IT/CS/Engineering/Math, 3+ years penetration testing experience, familiarity with Kali Linux, Burp Suite, Metasploit, Nessus, OWASP Top 10 and MITRE ATT&CK, Windows/Linux/macOS internals, mentoring and QA oversight, willingness to travel 5-10%.
Kali Linux, Burp Suite, Metasploit, Nessus, MITRE ATT&CK, OWASP Top 10, Windows, Linux, macOS, Ruby, Python, Perl, C, C++, Java, C#
3w
Save
Mark Applied
Hide
Manager, Security Engineering
Toronto, Ontario, Canada
$140k-$150k/yr HybridFull Time
TMX Group
TMX GroupToronto Stock Exchange: X: Operates global financial markets and exchange trading platforms.
7+ YOEPost-secondary degree or diploma in CS/InfoSec, 7+ years in information security with people management experience, deep knowledge of security platforms, application onboarding and enterprise networks, strong communication and leadership skills.
1w
Save
Mark Applied
Hide
Software Engineer
Toronto or Ontario
$80k-$105k/yr RemoteFull Time
InvestorCOM
InvestorCOM: Provides regulatory compliance software for wealth and asset managers.
3+ YOE3+ years software development experience; strong C#/.NET, SQL Server, RESTful API, Azure, and Git skills; experience with secure, scalable SaaS applications and Agile practices.
C#, .NET, SQL Server, RESTful APIs, Microsoft Azure, Git, Azure DevOps, CI/CD, Angular, React
3mo
Save
Mark Applied
Hide
Consultant/Senior Consultant, Cloud Security (Toronto, ON, CA, M5C 3G7)
Toronto or Calgary or Edmonton or Ottawa or Vancouver
$57k-$138k/yr HybridFull Time
Deloitte
Deloitte: Global provider of audit, consulting, financial, and tax services.
1+ YOE1-5 years in application development; degree in CS/Engineering/IS; strong AWS/Azure security; Kubernetes security; DevSecOps; scripting (Git, Bash, PowerShell, Python); Terraform IaC; policy languages; cloud security tooling; AI/ML security awareness; Canadian government security clearance eligibility.
AWS, Azure, Kubernetes, Terraform, Git, Bash, PowerShell, Python, JSON, YAML, Sentinel, OPA, CI/CD, Palo Alto Prisma Cloud, Wiz, Orca, Copilot
5d
Save
Mark Applied
Hide
Senior Developer
Toronto, Ontario, Canada
OnsiteFull Time
Royal Bank of Canada
Royal Bank of CanadaTSX: RY: Provides personal, commercial, and investment banking services worldwide.
5+ YOE5+ years developing large enterprise C#/.NET applications, strong SQL Server, REST/Microservices, security, IIS, unit testing, CI/CD and Agile experience; strong communication skills.
C#, .NET Core, .NET Framework, Microsoft SQL Server, REST API, Micro Services, Web Services, JSON, Swagger, SOAP, Kerberos, SSL Certificates, IIS, Tableau, CI/CD, Jenkins, Nexus, GITHUB, JIRA, ServiceNow, Confluence, SharePoint, Java, JavaScript, Excel VBA