107 application security jobs at 52 companies in Lockport, NY

1mo
Save
Mark Applied
Hide
Application Security Engineer
Toronto, Ontario, Canada
HybridFull Time
Opendoor
OpendoorNASDAQ: OPEN: Online platform for buying and selling residential real estate.
5+ YOE5+ years application security or security-focused software engineering; strong in Python, Go, TypeScript, or Ruby; experience with AppSec tooling (GitHub Advanced Security, Semgrep, HackerOne, Burp); cloud and Kubernetes security experience; practical threat modeling skills.
Go, Python, TypeScript, Ruby, Terraform, AWS, GCP, Azure, Kubernetes, Apollo GraphQL, GitHub Advanced Security, CodeQL, Dependabot, Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Claude, OpenAI, MCP, GitHub, Linear, Slack
3w
Save
Mark Applied
Hide
Application Security Developer
Toronto or Vancouver or Calgary or Canada
$117k-$158k/yr HybridFull Time
Clio
Clio: Cloud-based legal practice management software and AI solutions.
Experience in application/product security and offensive testing, vulnerability identification and remediation, threat modeling, proficiency in at least one language (Python, .NET, Ruby, JavaScript), cloud security (AWS/Azure/GCP), and common app-security tools.
Python, .NET, Ruby, JavaScript, AWS, Azure, GCP, Burp Suite, SAST, SCA, SIEM, ELK, Ruby on Rails, Puppet, Kubernetes, Terraform, Elastic, Logtash, Kibana
2d
Save
Mark Applied
Hide
Application Security Engineer - ADR
Quincy or Toronto or Austin or Atlanta
$120k-$203k/yr OnsiteFull Time
State Street
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
6+ YOEHands-on experience with application security, ADR/RASP/WAAP, SAST/DAST/SCA, cloud (Azure/AWS), DevSecOps, secure SDLC, threat detection, incident response, and relevant security certifications.
Java, .NET, Python, Node.js, Azure, AWS, SAST, DAST, SCA, API Security, Container Security, Runtime Application Self-Protection (RASP), Web Application and API Protection (WAAP), Ansible, Terraform, Kubernetes, Infrastructure as Code (IaC), Agile, DevOps
3mo
Save
Mark Applied
Hide
Senior Application Security Developer , AI Security
Toronto, Ontario, Canada
$101k-$149k/yr HybridFull Time
Autodesk
AutodeskNASDAQ: ADSK: Developing software for architecture, engineering, and entertainment industries.
5+ YOE5+ years in application security; strong OWASP knowledge; secure development practices; experience with AI/LLM security; scripting programming; CI/CD integration; clear communication.
Python, JavaScript, Go, Cursor, Claude, CI/CD, LLM, AI Security
1mo
Save
Mark Applied
Hide
Senior Application Security Specialist
Toronto, Ontario, Canada
$113k-$163k/yr HybridFull Time
Manulife
ManulifeNYSE: MFC: Provides life insurance, investment management, and global financial services.
Experienced application security specialist with hands-on SAST/DAST/SCA tool usage, penetration testing, vulnerability and risk management, cloud (Azure/AWS/Alibaba Cloud) knowledge, governance frameworks (NIST/ISO), and data visualization/reporting skills.
SAST, DAST, SCA, Snyk, Burp Suite, SonarQube, Veracode, Checkmarx, GitGuardian, GitHub, Azure DevOps, Tableau, Microsoft Power BI, JIRA, Confluence, Microsoft 365, ServiceNow \u00096 Security Operations, Archer, PTES, OWASP, OSSTM
2w
Save
Mark Applied
Hide
Senior Application Security Engineer (258939)
Toronto, Ontario, Canada
OnsiteFull Time
Scotiabank
ScotiabankToronto Stock Exchange: BNS: Provides global personal, commercial, and investment banking services.
5+ YOE5+ Mgmt5+ years AppSec and DevSecOps experience, expertise with application security tooling, containerization, cloud platforms, CI/CD pipelines, scripting, and strong communication and analytical skills.
SAST, DAST, SCA, SBOM, API security, secrets detection, CNAPP, Docker, Kubernetes, Azure, GCP, AWS, Python, PowerShell, Bash, Java, C#, .NET, Jenkins, BitBucket, Azure DevOps, GitHub Actions, Maven, Gradle, npm
3w
Save
Mark Applied
Hide
Lead Application Security Engineer
Toronto or St. John's or Montreal
$121k-$170k/yr HybridFull Time
Nasdaq
NasdaqNASDAQ: NDAQ: Operates global electronic marketplaces and provides financial technology services.
10+ YOE10+ years information security experience across on-prem and cloud, bachelor's in CS/IS or equivalent, active security certification (CISSP/CISA/CCSP/GIAC), hands-on app security/testing experience, strong risk communication skills.
Google Cloud
2mo
Save
Mark Applied
Hide
Senior Application Security Engineer
Toronto, Ontario, Canada
$123k-$142k/yr HybridFull Time
HelloFresh
HelloFreshFrankfurt Stock Exchange: HFG: Global meal kit delivery service and food solutions provider.
4+ YOE4-7 years in offensive security; proficient in Python or Go; certifications such as OSWE or GWAPT; experience with web/mobile/cloud security testing; development of security tooling.
Python, Go, Nmap, Burp Suite, OWASP ZAP, Metasploit
2mo
Save
Mark Applied
Hide
Senior Security Engineer, Application Security
Bellevue or Menlo Park or New York or Toronto
$146k-$220k/yr HybridFull Time
Robinhood
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
5+ YOE5+ years in application security or related field; experience with secure SDLC and threat modeling; production-grade Python/Go experience; collaboration with engineers; reliability and incident response focus.
Python, Go
1w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
2w
Save
Mark Applied
Hide
Senior Security Engineer
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yr RemoteFull Time
Later
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
4w
Save
Mark Applied
Hide
Security Engineer
San Francisco or Palo Alto or Toronto or Los Angeles
OnsiteFull Time
HeyGen
HeyGen: Generate professional AI videos using digital avatars and voices.
Hands-on Python and AWS experience, cloud and application security, vulnerability management, IAM and secrets management, familiarity with SOC 2/ISO 27001, strong communication and threat modeling skills.
Python, AWS, Drata, Infisical, Bugcrowd, SOC 2, ISO 27001
1w
Save
Mark Applied
Hide
Principal Security Engineer
Toronto, Ontario, Canada
$220k-$280k/yr HybridFull Time
League
League: Provides an AI-powered healthcare consumer experience platform for enterprises.
8+ YOE8+ years security engineering experience; deep expertise in encryption/key management, IAM, cloud or application security; hands-on securing AI/LLM systems; regulated environment experience (HIPAA/PIPEDA/SOC2); strong cross-functional collaboration.
1w
Save
Mark Applied
Hide
Cyber Security Engineer
Toronto, Ontario, Canada
$142k-$160k/yr HybridFull Time
Momentum Financial Services Group
Momentum Financial Services Group: Provides alternative financial services and consumer lending products.
7+ YOE7+ years security engineering experience designing and operating enterprise security controls across endpoint, email, cloud, SIEM, application security, and certificate management.
Endpoint Detection & Response (EDR), Email Security Platforms, Secure Web Gateways (SWG), Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Security Posture Management (CSPM), AWS Security Services and Guardrails, SIEM, PKI/TLS, PowerShell, Python
3mo
Save
Mark Applied
Hide
Enterprise Security Architect
Toronto or Vancouver
$140k-$170k/yr HybridFull Time
Vancity
Vancity: Member-owned credit union providing banking and investment services.
12+ YOE12+ years IT/Security; 5+ years Secure Application Architecture; 8+ years Secure Software Dev/DevSecOps; extensive security tooling and cloud security experience; CISSP/CCSP or similar; strong stakeholder communication.
SAST, DAST, SCA, IAST, Azure, OAuth2, OIDC, SAML, DevSecOps, CI/CD, Security Baselines, Threat Modelling
1mo
Save
Mark Applied
Hide
Staff/Senior Engineer, Security
San Francisco or Toronto or United States or Canada
$180k-$260k/yr HybridFull Time
EvenUp
EvenUp: AI-powered document generation and analysis for personal injury law.
5+ YOE5+ years in security-focused engineering with hands-on architecture, SAST/DAST and CI/CD integration, cloud and application security, experience securing AI systems, strong scripting (Python) and relevant cybersecurity certification.
SAST, DAST, CI/CD, OWASP, JFrog, Snyk, SASE, CASB, RASP, Python, Ruby, Node.js, DNS-SEC
2w
Save
Mark Applied
Hide
Security Shift Supervisor (Unarmed)
Lewiston, New York, United States
OnsiteFull Time
Tarian Group
Tarian Group: Provides professional security guarding and protective services for critical infrastructure.
High school/GED, ability to obtain applicable security licenses, ability to stand/walk full shifts and lift up to 80 lbs., valid driver’s license if applicable; supervisory experience preferred.
2w
Save
Mark Applied
Hide
Security Shift Supervisor (Unarmed)
Lewiston, New York, United States
OnsiteFull Time
Tarian Group
Tarian Group: Provides professional security guarding and integrated technology solutions.
High school diploma or GED; ability to obtain/maintain applicable security licenses; strong vision; able to stand entire shifts and lift up to 80 lbs.; valid driver’s license if applicable.
3w
Save
Mark Applied
Hide
Business Unit Security Officer
Waterloo or Toronto
$86k-$136k/yr HybridFull Time
Manulife
ManulifeTSX: MFC: Provides insurance, wealth management, and investment services globally.
5+ YOE5+ years information security and IT/risk experience, expertise in cloud, application, and data protection, familiarity with DevOps pipelines, strong communication and risk assessment skills; relevant security designations preferred.
DevOps, IaaS, PaaS, SaaS, Artificial Intelligence (AI)
1mo
Save
Mark Applied
Hide
Senior Security Consultant (Web Application Penetration Tester)
Toronto, Ontario, Canada
OnsiteFull Time
NetSPI
NetSPI: Provides enterprise penetration testing and attack surface management services.
3+ YOE3+ years penetration testing experience, bachelor\u0002s degree (or equivalent), familiarity with Kali Linux, Burp Suite, Metasploit, Nessus, OWASP Top 10 and MITRE ATT&CK; mentoring and QA oversight experience; willingness to travel 5-10%.
Kali Linux, Burp Suite, Metasploit, Nessus, OWASP Top 10, MITRE ATT&CK, Windows, Linux, MacOS, Ruby, Python, Perl, C, C++, Java, C#