62 application security engineer jobs at 34 companies in Newfane, NY

1mo
Save
Mark Applied
Hide
Application Security Engineer
Toronto, Ontario, Canada
HybridFull Time
Opendoor
OpendoorNASDAQ: OPEN: Online platform for buying and selling residential real estate.
5+ YOE5+ years application security or security-focused software engineering; strong in Python, Go, TypeScript, or Ruby; experience with AppSec tooling (GitHub Advanced Security, Semgrep, HackerOne, Burp); cloud and Kubernetes security experience; practical threat modeling skills.
Go, Python, TypeScript, Ruby, Terraform, AWS, GCP, Azure, Kubernetes, Apollo GraphQL, GitHub Advanced Security, CodeQL, Dependabot, Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Claude, OpenAI, MCP, GitHub, Linear, Slack
1mo
Save
Mark Applied
Hide
Application Security Engineer
Toronto, Ontario, Canada
HybridFull Time
Opendoor
OpendoorNASDAQ: OPEN: Digital marketplace for buying and selling residential real estate.
5+ YOE5+ years application security or security-focused software engineering; hands-on with Go/Python/TypeScript/Ruby; experience with AppSec toolchains, cloud/Kubernetes security, threat modeling, and automation.
Go, Python, TypeScript, Ruby, Terraform, AWS, GCP, Azure, Kubernetes, Apollo GraphQL, GitHub Advanced Security (CodeQL, Dependabot, secret scanning), Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Claude, OpenAI, MCP
1mo
Save
Mark Applied
Hide
Application Security Developer
Toronto or Vancouver or Calgary or Canada
$117k-$158k/yr HybridFull Time
Clio
Clio: Cloud-based legal practice management software and AI solutions.
Experience in application/product security and offensive testing, vulnerability identification and remediation, threat modeling, proficiency in at least one language (Python, .NET, Ruby, JavaScript), cloud security (AWS/Azure/GCP), and common app-security tools.
Python, .NET, Ruby, JavaScript, AWS, Azure, GCP, Burp Suite, SAST, SCA, SIEM, ELK, Ruby on Rails, Puppet, Kubernetes, Terraform, Elastic, Logtash, Kibana
1w
Save
Mark Applied
Hide
Senior Application Security Engineer
London or New York or Pune or Toronto
$125k-$165k/yr OnsiteFull Time
TripleLift
TripleLift: Programmatic advertising platform for high-quality digital ad experiences.
5+ YOE5+ years application security experience; hands-on SAST/DAST/SCA, CI/CD integration, pentesting, threat modeling, secure coding guidance, and AWS security controls.
GitHub Advanced Security (GHAS), CodeQL, Burp Suite, OWASP ZAP, Snyk, Checkmarx, Veracode, Python, Java, TypeScript, Go, IAM, VPC, KMS, GuardDuty, CloudTrail, Claude
2w
Save
Mark Applied
Hide
Application Security Engineer - ADR
Quincy or Toronto or Austin or Atlanta
$120k-$203k/yr OnsiteFull Time
State Street
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
6+ YOEHands-on experience with application security, ADR/RASP/WAAP, SAST/DAST/SCA, cloud (Azure/AWS), DevSecOps, secure SDLC, threat detection, incident response, and relevant security certifications.
Java, .NET, Python, Node.js, Azure, AWS, SAST, DAST, SCA, API Security, Container Security, Runtime Application Self-Protection (RASP), Web Application and API Protection (WAAP), Ansible, Terraform, Kubernetes, Infrastructure as Code (IaC), Agile, DevOps
2mo
Save
Mark Applied
Hide
Application Security Engineer
Toronto, Ontario, Canada
$105-$115/yr HybridFull Time
HelloFresh
HelloFreshFrankfurt Stock Exchange: HFG: Global meal kit delivery service and food solutions provider.
2+ YOEProficiency in Python or Go; 2+ years security experience; exposure to Terraform, Docker, container management, CI/CD, and secrets management; experience designing security controls; familiarity with agile, Jira, and Slack.
Python, Go, Terraform, Docker, CI/CD, Jira, Slack
2mo
Save
Mark Applied
Hide
Senior Security Engineer, Application Security
Bellevue or Menlo Park or New York or Toronto
$146k-$220k/yr HybridFull Time
Robinhood
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
5+ YOE5+ years in application security or related field; experience with secure SDLC and threat modeling; production-grade Python/Go experience; collaboration with engineers; reliability and incident response focus.
Python, Go
1mo
Save
Mark Applied
Hide
Senior Security Engineer
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yr RemoteFull Time
Later
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
2mo
Save
Mark Applied
Hide
Staff/Senior Engineer, Security
San Francisco or Toronto or United States or Canada
$180k-$260k/yr HybridFull Time
EvenUp
EvenUp: AI-powered document generation and analysis for personal injury law.
5+ YOE5+ years in security-focused engineering with hands-on architecture, SAST/DAST and CI/CD integration, cloud and application security, experience securing AI systems, strong scripting (Python) and relevant cybersecurity certification.
SAST, DAST, CI/CD, OWASP, JFrog, Snyk, SASE, CASB, RASP, Python, Ruby, Node.js, DNS-SEC
1mo
Save
Mark Applied
Hide
Security Engineer
San Francisco or Palo Alto or Toronto or Los Angeles
OnsiteFull Time
HeyGen
HeyGen: Generate professional AI videos using digital avatars and voices.
Hands-on Python and AWS experience, cloud and application security, vulnerability management, IAM and secrets management, familiarity with SOC 2/ISO 27001, strong communication and threat modeling skills.
Python, AWS, Drata, Infisical, Bugcrowd, SOC 2, ISO 27001
2mo
Save
Mark Applied
Hide
Staff, Security Engineer
Ottawa or Toronto or Calgary or Vancouver or Austin
RemoteFull Time
Fullscript
Fullscript: Healthcare platform for practitioner supplement dispensing and patient management.
8+ YOE8+ years software engineering experience with 3+ years in application/product/security engineering; deep knowledge of secure software development, cloud-native architectures, vulnerability management, security tooling, and mentoring.
Ruby on Rails, Node.js, JavaScript, GraphQL, AWS, STRIDE, PASTA, GitHub, GitLab, Wiz
3w
Save
Mark Applied
Hide
Principal Security Engineer
Toronto, Ontario, Canada
$220k-$280k/yr HybridFull Time
League
League: Provides an AI-powered healthcare consumer experience platform for enterprises.
8+ YOE8+ years security engineering experience; deep expertise in encryption/key management, IAM, cloud or application security; hands-on securing AI/LLM systems; regulated environment experience (HIPAA/PIPEDA/SOC2); strong cross-functional collaboration.
5d
Save
Mark Applied
Hide
Staff AI Application Engineer
Toronto, Ontario, Canada
OnsiteFull Time
Royal Bank of Canada
Royal Bank of CanadaTSX: RY: Provides personal, commercial, and investment banking services worldwide.
5+ YOE5+ years of software engineering experience, including 2+ years with Python backend services and Django or FastAPI. Requires Celery, API security, Kubernetes/OpenShift, CI/CD, and GenAI application experience.
Python, Django, FastAPI, Celery, LangChain, LangGraph, OpenShift Container Platform (OCP), Kubernetes, Helios, OAuth2, JWT, OpenTelemetry, Langfuse, LangSmith, Claude Code, Cursor, Windsurf, Devin, PostgreSQL, Redis, pgvector, FAISS, Milvus, Vue.js, React, OpenAI, Anthropic Claude, Cohere, Llama, Grafana, Prometheus, SAST, DAST, Docker, RESTful APIs
3w
Save
Mark Applied
Hide
Cyber Security Engineer
Toronto, Ontario, Canada
$142k-$160k/yr HybridFull Time
Momentum Financial Services Group
Momentum Financial Services Group: Provides alternative financial services and consumer lending products.
7+ YOE7+ years security engineering experience designing and operating enterprise security controls across endpoint, email, cloud, SIEM, application security, and certificate management.
Endpoint Detection & Response (EDR), Email Security Platforms, Secure Web Gateways (SWG), Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Security Posture Management (CSPM), AWS Security Services and Guardrails, SIEM, PKI/TLS, PowerShell, Python
1w
Save
Mark Applied
Hide
Application Segmentation Engineer
Toronto or Calgary or Halifax or Ottawa or Vancouver
$69k-$114k/yr RemoteFull Time
Deloitte
Deloitte: Global provider of audit, consulting, financial, and tax services.
4+ YOEBachelor's or equivalent experience, 4+ years total (min 2 years network security and 2 years micro segmentation), strong Zero Trust and micro segmentation knowledge, experience with Cisco Secure Workload/Illumio, cloud networking, automation (APIs/JSON/Python/PowerShell/Terraform).
Cisco Secure Workload, Illumio, Guardicore, VMware NSX, APIs, JSON, Python, PowerShell, Terraform, ServiceNow, AWS, Azure, Google Cloud, AI
1w
Save
Mark Applied
Hide
Senior Software Developer - Application Security (269194)
Toronto, Ontario, Canada
OnsiteFull Time
Scotiabank
ScotiabankToronto Stock Exchange: BNS: Provides global personal, commercial, and investment banking services.
8+ YOE8+ years software engineering experience, system design and architecture expertise, cloud and DevSecOps knowledge, experience leading technical workstreams and supporting mission-critical applications.
GitHub, GitLab, Microsoft Azure DevOps, Checkmarx, Snyk, Veracode, Fortify, Salt Security, Docker, Kubernetes, SIEM, Azure, AWS, GCP
1w
Save
Mark Applied
Hide
Sr. Consultant, Full Stack Application Developer
Toronto, Ontario, Canada
OnsiteFull Time
CIBC
CIBCToronto Stock Exchange: CM: Provides personal, commercial, and investment banking and wealth management.
8+ YOE8+ years software development experience with Go and backend services; experience with payments, APIs, relational databases, cloud (Azure), containerization, CI/CD, security and observability.
Go, Java, C, Azure PostgreSQL, Azure SQL, Oracle, Solace, Docker, Kubernetes, OpenShift, GitHub Actions, Bash, PowerShell, Python, mTLS, JWT, OpenTelemetry, Prometheus, Splunk, Git, Istio, ISO20022
1mo
Save
Mark Applied
Hide
DevSecOps Engineer
Washington, D.C. or Sarasota or Miami or New York City or Toronto or Longboat Key
$165k-$195k/yr OnsiteFull Time
Rumble
RumbleNASDAQ: RUM: Video sharing platform and cloud infrastructure provider.
Experienced in DevSecOps/application or product security, SSDLC design and operation, CI/CD hardening, SAST/DAST/SCA and container scanning, Python/Go/TypeScript code review, Docker/Kubernetes, Vault, and secure supply chain practices.
OpenStack, Ceph, Python, Go, TypeScript, GitHub Actions, GitLab CI, Jenkins, SAST, DAST, SCA, secret scanning, container scanning, SBOM, Sigstore/cosign, SLSA, Docker, Kubernetes, Vault, OAuth2, OpenID Connect, Terraform, Ansible, STRIDE, PASTA, Rocky Linux, Ubuntu, OWASP Top 10
1d
Save
Mark Applied
Hide
AI Engineer Lead, Application Development
Toronto, Ontario, Canada
OnsiteFull Time
First National Financial
First National Financial: Provides residential and commercial mortgage lending services in Canada.
8+ YOEBachelor's degree and 8+ years of technology experience required. Experience with production AI, Azure, Databricks, Python, SQL, APIs, CI/CD, infrastructure as code, and secure software delivery.
Databricks, Microsoft Azure, Lakeflow, Delta Lake, Unity Catalog, Vector Search, MLflow, Databricks Model Serving, Azure AI Document Intelligence, Azure OpenAI Service, Service Bus, API Management, Key Vault, Entra ID, Azure Monitor, Log Analytics, Python, SQL, .NET, TypeScript, FastAPI, React, Blazor, Git, CI/CD, Terraform, GitHub, Azure DevOps, FinOps
1mo
Save
Mark Applied
Hide
Senior Security Consultant (Web Application Penetration Tester)
Toronto, Ontario, Canada
OnsiteFull Time
NetSPI
NetSPI: Provides proactive cybersecurity testing solutions and attack surface management.
3+ YOEBachelor's in IT/CS/Engineering/Math (or equiv), 3+ years penetration testing, familiarity with Kali/Burp/Metasploit/Nessus, OWASP and MITRE knowledge, OS internals, strong communication and mentoring skills, willing to travel 5-10%.
Kali Linux, Burp Suite, Metasploit, Nessus, OWASP Top 10, MITRE ATT&CK, Windows, Linux, macOS, Ruby, Python, Perl, C, C++, Java, C#