Clio: Cloud-based legal practice management software and AI solutions.
Experience in application/product security and offensive testing, vulnerability identification and remediation, threat modeling, proficiency in at least one language (Python, .NET, Ruby, JavaScript), cloud security (AWS/Azure/GCP), and common app-security tools.
ScotiabankToronto Stock Exchange: BNS: Provides global personal, commercial, and investment banking services.
5+ YOE5+ Mgmt5+ years AppSec and DevSecOps experience, expertise with application security tooling, containerization, cloud platforms, CI/CD pipelines, scripting, and strong communication and analytical skills.
NasdaqNASDAQ: NDAQ: Operates global electronic marketplaces and provides financial technology services.
10+ YOE10+ years information security experience across on-prem and cloud, bachelor's in CS/IS or equivalent, active security certification (CISSP/CISA/CCSP/GIAC), hands-on app security/testing experience, strong risk communication skills.
HelloFreshFrankfurt Stock Exchange: HFG: Global meal kit delivery service and food solutions provider.
4+ YOE4-7 years in offensive security; proficient in Python or Go; certifications such as OSWE or GWAPT; experience with web/mobile/cloud security testing; development of security tooling.
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
5+ YOE5+ years in application security or related field; experience with secure SDLC and threat modeling; production-grade Python/Go experience; collaboration with engineers; reliability and incident response focus.
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yrRemoteFull Time
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
San Francisco or Palo Alto or Toronto or Los Angeles
OnsiteFull Time
HeyGen: Generate professional AI videos using digital avatars and voices.
Hands-on Python and AWS experience, cloud and application security, vulnerability management, IAM and secrets management, familiarity with SOC 2/ISO 27001, strong communication and threat modeling skills.
Python, AWS, Drata, Infisical, Bugcrowd, SOC 2, ISO 27001
San Francisco or Toronto or United States or Canada
$180k-$260k/yrHybridFull Time
EvenUp: AI-powered document generation and analysis for personal injury law.
5+ YOE5+ years in security-focused engineering with hands-on architecture, SAST/DAST and CI/CD integration, cloud and application security, experience securing AI systems, strong scripting (Python) and relevant cybersecurity certification.
Tarian Group: Provides professional security guarding and protective services for critical infrastructure.
High school/GED, ability to obtain applicable security licenses, ability to stand/walk full shifts and lift up to 80 lbs., valid driver’s license if applicable; supervisory experience preferred.
Tarian Group: Provides professional security guarding and integrated technology solutions.
High school diploma or GED; ability to obtain/maintain applicable security licenses; strong vision; able to stand entire shifts and lift up to 80 lbs.; valid driver’s license if applicable.
ManulifeTSX: MFC: Provides insurance, wealth management, and investment services globally.
5+ YOE5+ years information security and IT/risk experience, expertise in cloud, application, and data protection, familiarity with DevOps pipelines, strong communication and risk assessment skills; relevant security designations preferred.
NetSPI: Provides enterprise penetration testing and attack surface management services.
3+ YOE3+ years penetration testing experience, bachelor\u0002s degree (or equivalent), familiarity with Kali Linux, Burp Suite, Metasploit, Nessus, OWASP Top 10 and MITRE ATT&CK; mentoring and QA oversight experience; willingness to travel 5-10%.