116 application security jobs at 64 companies in North Tonawanda, NY
1mo
Save
Mark Applied
Hide
1mo
Application Security Engineer
Toronto, Ontario, Canada
HybridFull Time
OpendoorNASDAQ: OPEN: Digital marketplace for buying and selling residential real estate.
5+ YOE5+ years application security or security-focused software engineering; hands-on with Go/Python/TypeScript/Ruby; experience with AppSec toolchains, cloud/Kubernetes security, threat modeling, and automation.
Clio: Cloud-based legal practice management software and AI solutions.
Experience in application/product security and offensive testing, vulnerability identification and remediation, threat modeling, proficiency in at least one language (Python, .NET, Ruby, JavaScript), cloud security (AWS/Azure/GCP), and common app-security tools.
ACV AuctionsNYSE: ACVA: Digital marketplace for buying and selling wholesale used vehicles.
12+ YOE12+ years of security experience, deep application security architecture, production GenAI/LLM security work, coding fluency, AI security tooling, OWASP, MITRE ATLAS, NIST AI RMF, cloud security, and a bachelor's degree or equivalent experience.
Relay: Digital banking and cash flow management for small businesses.
5+ YOERequires 5–6 years of professional security experience, production software development, application security or penetration testing expertise, OWASP Top 10 knowledge, AI tooling experience, communication, ownership, and mentoring skills.
TypeScript, Node.js, Postgres, AWS, Datadog, Burp Suite, Claude Code, Cursor, Hack The Box, Google Meet, OWASP Top 10, SBOM, SCA, Certn
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
5+ YOE5+ years in application security or related field; experience with secure SDLC and threat modeling; production-grade Python/Go experience; collaboration with engineers; reliability and incident response focus.
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yrOnsiteFull Time
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Royal Bank of CanadaTSX: RY: Provides personal, commercial, and investment banking services worldwide.
7+ YOE7+ years software development experience with advanced Python and web frameworks, cloud and containerization expertise, databases, REST APIs, and mentoring experience.
Ottawa or Toronto or Calgary or Vancouver or Austin
RemoteFull Time
Fullscript: Healthcare platform for practitioner supplement dispensing and patient management.
8+ YOE8+ years software engineering experience with 3+ years in application/product/security engineering; deep knowledge of secure software development, cloud-native architectures, vulnerability management, security tooling, and mentoring.
Forma.ai: AI-powered platform for managing enterprise sales compensation and performance.
6+ YOERequires 6+ years in security or infrastructure engineering, hands-on AWS security, Terraform, Kubernetes, CI/CD controls, application and API security, incident response, automation, and scripting with Python, Bash, or PowerShell.
Amazon Web Services (AWS), Terraform, Kubernetes, Amazon S3, Amazon Bedrock, GitHub, Microsoft 365, Microsoft Entra ID, Python, Bash, PowerShell, Datadog, Wiz, Snyk, CrowdStrike, EKS, CI/CD, IAM, SSO, MFA, SOC 2, ISO 27001
Allied Universal: Global provider of security guard and facility management services.
Must be at least 18, have a high school diploma or equivalent, pass background and drug screening, and meet applicable security licensing requirements.
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yrRemoteFull Time
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
San Francisco or Palo Alto or Toronto or Los Angeles
OnsiteFull Time
HeyGen: Generate professional AI videos using digital avatars and voices.
Hands-on Python and AWS experience, cloud and application security, vulnerability management, IAM and secrets management, familiarity with SOC 2/ISO 27001, strong communication and threat modeling skills.
Python, AWS, Drata, Infisical, Bugcrowd, SOC 2, ISO 27001
Solifi: Unified SaaS platform for secured finance and lending operations.
Knowledge of IP networking, DNS, Active Directory, SSL/PKI, SQL Server/Oracle, Java application servers (JBoss/WildFly), VMware/AWS exposure, security standards (SSAE16/ISO27001), strong communication and problem-solving; weekend/night availability.
San Francisco or Toronto or United States or Canada
$180k-$260k/yrHybridFull Time
EvenUp: AI-powered document generation and analysis for personal injury law.
5+ YOE5+ years in security-focused engineering with hands-on architecture, SAST/DAST and CI/CD integration, cloud and application security, experience securing AI systems, strong scripting (Python) and relevant cybersecurity certification.
Toronto or Calgary or Halifax or Ottawa or Vancouver
$69k-$114k/yrRemoteFull Time
Deloitte: Global provider of audit, consulting, financial, and tax services.
4+ YOEBachelor's or equivalent experience, 4+ years total (min 2 years network security and 2 years micro segmentation), strong Zero Trust and micro segmentation knowledge, experience with Cisco Secure Workload/Illumio, cloud networking, automation (APIs/JSON/Python/PowerShell/Terraform).
Cisco Secure Workload, Illumio, Guardicore, VMware NSX, APIs, JSON, Python, PowerShell, Terraform, ServiceNow, AWS, Azure, Google Cloud, AI