116 application security jobs at 64 companies in North Tonawanda, NY

1mo
Save
Mark Applied
Hide
Application Security Engineer
Toronto, Ontario, Canada
HybridFull Time
Opendoor
OpendoorNASDAQ: OPEN: Digital marketplace for buying and selling residential real estate.
5+ YOE5+ years application security or security-focused software engineering; hands-on with Go/Python/TypeScript/Ruby; experience with AppSec toolchains, cloud/Kubernetes security, threat modeling, and automation.
Go, Python, TypeScript, Ruby, Terraform, AWS, GCP, Azure, Kubernetes, Apollo GraphQL, GitHub Advanced Security (CodeQL, Dependabot, secret scanning), Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Claude, OpenAI, MCP
1mo
Save
Mark Applied
Hide
Application Security Engineer
Toronto, Ontario, Canada
HybridFull Time
Opendoor
OpendoorNASDAQ: OPEN: Online platform for buying and selling residential real estate.
5+ YOE5+ years application security or security-focused software engineering; strong in Python, Go, TypeScript, or Ruby; experience with AppSec tooling (GitHub Advanced Security, Semgrep, HackerOne, Burp); cloud and Kubernetes security experience; practical threat modeling skills.
Go, Python, TypeScript, Ruby, Terraform, AWS, GCP, Azure, Kubernetes, Apollo GraphQL, GitHub Advanced Security, CodeQL, Dependabot, Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Claude, OpenAI, MCP, GitHub, Linear, Slack
1mo
Save
Mark Applied
Hide
Application Security Developer
Toronto or Vancouver or Calgary or Canada
$117k-$158k/yr HybridFull Time
Clio
Clio: Cloud-based legal practice management software and AI solutions.
Experience in application/product security and offensive testing, vulnerability identification and remediation, threat modeling, proficiency in at least one language (Python, .NET, Ruby, JavaScript), cloud security (AWS/Azure/GCP), and common app-security tools.
Python, .NET, Ruby, JavaScript, AWS, Azure, GCP, Burp Suite, SAST, SCA, SIEM, ELK, Ruby on Rails, Puppet, Kubernetes, Terraform, Elastic, Logtash, Kibana
3d
Save
Mark Applied
Hide
Senior Application Security Engineer
London or New York City or Pune or Toronto
OnsiteFull Time
TripleLift
TripleLift: Programmatic advertising platform for high-quality digital ad experiences.
5+ YOERequires 5+ years in application security or security engineering, secure coding, penetration testing, threat modeling, CI/CD security, AWS security, and SAST, DAST, and SCA tools.
GitHub Advanced Security, SAST, DAST, SCA, CodeQL, Burp Suite, OWASP ZAP, Snyk, Checkmarx, Veracode, CI/CD, Python, Java, TypeScript, Go, NIST CSF, PCI, SOC2, HITRUST, ISO 27001/2, AWS, IAM, VPC, KMS, GuardDuty, CloudTrail, Claude
2d
Save
Mark Applied
Hide
AI Application Security Architect
Buffalo, New York, United States
$200k-$250k/yr RemoteFull Time
ACV Auctions
ACV AuctionsNYSE: ACVA: Digital marketplace for buying and selling wholesale used vehicles.
12+ YOE12+ years of security experience, deep application security architecture, production GenAI/LLM security work, coding fluency, AI security tooling, OWASP, MITRE ATLAS, NIST AI RMF, cloud security, and a bachelor's degree or equivalent experience.
Python, Garak, PyRIT, promptfoo, OWASP Top 10, MITRE ATLAS, NIST AI RMF, Snyk, Checkmarx, GitHub Advanced Security, Burp Suite, AWS, Kubernetes, SageMaker, Bedrock, MCP
2w
Save
Mark Applied
Hide
Application Security Engineer - ADR
Quincy or Toronto or Austin or Atlanta
$120k-$203k/yr OnsiteFull Time
State Street
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
6+ YOEHands-on experience with application security, ADR/RASP/WAAP, SAST/DAST/SCA, cloud (Azure/AWS), DevSecOps, secure SDLC, threat detection, incident response, and relevant security certifications.
Java, .NET, Python, Node.js, Azure, AWS, SAST, DAST, SCA, API Security, Container Security, Runtime Application Self-Protection (RASP), Web Application and API Protection (WAAP), Ansible, Terraform, Kubernetes, Infrastructure as Code (IaC), Agile, DevOps
4d
Save
Mark Applied
Hide
Senior Application Security Engineer II
Toronto, Ontario, Canada
$180k-$220k/yr HybridFull Time
Relay
Relay: Digital banking and cash flow management for small businesses.
5+ YOERequires 5–6 years of professional security experience, production software development, application security or penetration testing expertise, OWASP Top 10 knowledge, AI tooling experience, communication, ownership, and mentoring skills.
TypeScript, Node.js, Postgres, AWS, Datadog, Burp Suite, Claude Code, Cursor, Hack The Box, Google Meet, OWASP Top 10, SBOM, SCA, Certn
2mo
Save
Mark Applied
Hide
Senior Security Engineer, Application Security
Bellevue or Menlo Park or New York or Toronto
$146k-$220k/yr HybridFull Time
Robinhood
RobinhoodNASDAQ: HOOD: Provides a commission-free platform for investing and financial services.
5+ YOE5+ years in application security or related field; experience with secure SDLC and threat modeling; production-grade Python/Go experience; collaboration with engineers; reliability and incident response focus.
Python, Go
3w
Save
Mark Applied
Hide
Senior Associate, Application Security, DevSecOps
Birmingham or Bentonville or Phoenix or Tempe or Irvine or Los Angeles or Sacramento or San Diego or San Francisco or Santa Clara or Boulder or Denver or Hartford or Stamford or Washington or Fort Lauderdale or Jacksonville or Miami or Orlando or Tallahassee or Tampa or Atlanta or Des Moines or Boise or Chicago or Indianapolis or Louisville or Baton Rouge or New Orleans or Shreveport or Boston or Baltimore or Detroit or Minneapolis or Kansas City or St Louis or Jackson or Charlotte or Raleigh or Winston-Salem or Lincoln or Omaha or Montvale or Short Hills or Albuquerque or Las Vegas or Albany or Buffalo or Melville or New York or Rochester or Cincinnati or Cleveland or Columbus or Oklahoma City or Portland or Harrisburg or Philadelphia or Pittsburgh or Providence or Greenville or Knoxville or Memphis or Nashville or Austin or Dallas or Fort Worth or Houston or San Antonio or Salt Lake City or Ashburn or McLean or Richmond or Seattle or Milwaukee or Virginia Beach or El Segundo
$90k-$168k/yr OnsiteFull Time
KPMG
KPMG: Global professional services network providing audit, tax, and advisory.
4+ YOE4+ years application security/DevSecOps experience, familiarity with CI/CD, SAST/DAST, cloud (preferably Azure), programming in Java/C#/JavaScript/Python/SQL, strong threat modeling and risk assessment skills, and U.S. work authorization without sponsorship.
Java, C#, JavaScript, Python, SQL, CI/CD, SAST, DAST, Azure, OWASP
2w
Save
Mark Applied
Hide
Senior Application Developer- Python (Global Security)
Toronto, Ontario, Canada
OnsiteFull Time
Royal Bank of Canada
Royal Bank of CanadaTSX: RY: Provides personal, commercial, and investment banking services worldwide.
7+ YOE7+ years software development experience with advanced Python and web frameworks, cloud and containerization expertise, databases, REST APIs, and mentoring experience.
Python, Django, FastApi, Flask, OCP, Azure, AWS, Docker, Kubernetes, SQL, NoSQL, Vue.js, HTML, CSS, JavaScript, Typescript, Jenkins, GIT, GitHub Actions, ELK, Dynatrace, Grafana
2mo
Save
Mark Applied
Hide
Staff, Security Engineer
Ottawa or Toronto or Calgary or Vancouver or Austin
RemoteFull Time
Fullscript
Fullscript: Healthcare platform for practitioner supplement dispensing and patient management.
8+ YOE8+ years software engineering experience with 3+ years in application/product/security engineering; deep knowledge of secure software development, cloud-native architectures, vulnerability management, security tooling, and mentoring.
Ruby on Rails, Node.js, JavaScript, GraphQL, AWS, STRIDE, PASTA, GitHub, GitLab, Wiz
4d
Save
Mark Applied
Hide
Senior Security Engineer
Toronto, Ontario, Canada
$160k-$190k/yr OnsiteFull Time
Forma.ai
Forma.ai: AI-powered platform for managing enterprise sales compensation and performance.
6+ YOERequires 6+ years in security or infrastructure engineering, hands-on AWS security, Terraform, Kubernetes, CI/CD controls, application and API security, incident response, automation, and scripting with Python, Bash, or PowerShell.
Amazon Web Services (AWS), Terraform, Kubernetes, Amazon S3, Amazon Bedrock, GitHub, Microsoft 365, Microsoft Entra ID, Python, Bash, PowerShell, Datadog, Wiz, Snyk, CrowdStrike, EKS, CI/CD, IAM, SSO, MFA, SOC 2, ISO 27001
1w
Save
Mark Applied
Hide
Security Officer Unarmed Patrol Security Services
Buffalo, New York, United States
$20/hr OnsiteFull Time
Allied Universal
Allied Universal: Global provider of security guard and facility management services.
Must be at least 18, have a high school diploma or equivalent, pass background and drug screening, and meet applicable security licensing requirements.
Perks Program
1mo
Save
Mark Applied
Hide
Senior Security Engineer
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yr RemoteFull Time
Later
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
1mo
Save
Mark Applied
Hide
Security Engineer
San Francisco or Palo Alto or Toronto or Los Angeles
OnsiteFull Time
HeyGen
HeyGen: Generate professional AI videos using digital avatars and voices.
Hands-on Python and AWS experience, cloud and application security, vulnerability management, IAM and secrets management, familiarity with SOC 2/ISO 27001, strong communication and threat modeling skills.
Python, AWS, Drata, Infisical, Bugcrowd, SOC 2, ISO 27001
2w
Save
Mark Applied
Hide
Junior Application Management Specialist
Toronto or Canada
RemoteFull Time
Solifi
Solifi: Unified SaaS platform for secured finance and lending operations.
Knowledge of IP networking, DNS, Active Directory, SSL/PKI, SQL Server/Oracle, Java application servers (JBoss/WildFly), VMware/AWS exposure, security standards (SSAE16/ISO27001), strong communication and problem-solving; weekend/night availability.
AWS, VMware, Windows Server, firewall, SQL Server, Oracle, Java, JBoss, WildFly
1mo
Save
Mark Applied
Hide
Principal Security Engineer
Toronto, Ontario, Canada
$220k-$280k/yr HybridFull Time
League
League: Provides an AI-powered healthcare consumer experience platform for enterprises.
8+ YOE8+ years security engineering experience; deep expertise in encryption/key management, IAM, cloud or application security; hands-on securing AI/LLM systems; regulated environment experience (HIPAA/PIPEDA/SOC2); strong cross-functional collaboration.
1mo
Save
Mark Applied
Hide
Cyber Security Engineer
Toronto, Ontario, Canada
$142k-$160k/yr HybridFull Time
Momentum Financial Services Group
Momentum Financial Services Group: Provides alternative financial services and consumer lending products.
7+ YOE7+ years security engineering experience designing and operating enterprise security controls across endpoint, email, cloud, SIEM, application security, and certificate management.
Endpoint Detection & Response (EDR), Email Security Platforms, Secure Web Gateways (SWG), Security Service Edge (SSE), Cloud Access Security Broker (CASB), Cloud Security Posture Management (CSPM), AWS Security Services and Guardrails, SIEM, PKI/TLS, PowerShell, Python
2mo
Save
Mark Applied
Hide
Staff/Senior Engineer, Security
San Francisco or Toronto or United States or Canada
$180k-$260k/yr HybridFull Time
EvenUp
EvenUp: AI-powered document generation and analysis for personal injury law.
5+ YOE5+ years in security-focused engineering with hands-on architecture, SAST/DAST and CI/CD integration, cloud and application security, experience securing AI systems, strong scripting (Python) and relevant cybersecurity certification.
SAST, DAST, CI/CD, OWASP, JFrog, Snyk, SASE, CASB, RASP, Python, Ruby, Node.js, DNS-SEC
1w
Save
Mark Applied
Hide
Application Segmentation Engineer
Toronto or Calgary or Halifax or Ottawa or Vancouver
$69k-$114k/yr RemoteFull Time
Deloitte
Deloitte: Global provider of audit, consulting, financial, and tax services.
4+ YOEBachelor's or equivalent experience, 4+ years total (min 2 years network security and 2 years micro segmentation), strong Zero Trust and micro segmentation knowledge, experience with Cisco Secure Workload/Illumio, cloud networking, automation (APIs/JSON/Python/PowerShell/Terraform).
Cisco Secure Workload, Illumio, Guardicore, VMware NSX, APIs, JSON, Python, PowerShell, Terraform, ServiceNow, AWS, Azure, Google Cloud, AI