15 appsec engineer jobs at 13 companies in Sanborn, NY

2mo
Save
Mark Applied
Hide
Application Security Engineer
Toronto, Ontario, Canada
HybridFull Time
Opendoor
OpendoorNASDAQ: OPEN: Online platform for buying and selling residential real estate.
5+ YOE5+ years application security or security-focused software engineering; strong in Python, Go, TypeScript, or Ruby; experience with AppSec tooling (GitHub Advanced Security, Semgrep, HackerOne, Burp); cloud and Kubernetes security experience; practical threat modeling skills.
Go, Python, TypeScript, Ruby, Terraform, AWS, GCP, Azure, Kubernetes, Apollo GraphQL, GitHub Advanced Security, CodeQL, Dependabot, Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Claude, OpenAI, MCP, GitHub, Linear, Slack
1mo
Save
Mark Applied
Hide
Senior Security Engineer
Boston or Chicago or Los Angeles or New York or San Francisco or Toronto or Vancouver or Vancouver
$145k-$175k/yr RemoteFull Time
Later
Later: Provides software for social media scheduling and influencer marketing.
5+ YOE5+ years security engineering experience; strong application, cloud, and infrastructure security; SOC 2 and compliance experience; vulnerability management, IaC and CI/CD security; strong communication and software engineering skills.
OWASP, NIST, CIS Controls, SOC 2, ISO 27001, AWS Security Hub, Azure Security Center, GCP Security Command Center, SIEM, SOAR, Terraform, CloudFormation, C#, CI/CD
2mo
Save
Mark Applied
Hide
Staff/Senior Engineer, Security
San Francisco or Toronto or United States or Canada
$180k-$260k/yr HybridFull Time
EvenUp
EvenUp: AI-powered document generation and analysis for personal injury law.
5+ YOE5+ years in security-focused engineering with hands-on architecture, SAST/DAST and CI/CD integration, cloud and application security, experience securing AI systems, strong scripting (Python) and relevant cybersecurity certification.
SAST, DAST, CI/CD, OWASP, JFrog, Snyk, SASE, CASB, RASP, Python, Ruby, Node.js, DNS-SEC
2mo
Save
Mark Applied
Hide
Application Security Engineer
Toronto, Ontario, Canada
HybridFull Time
Opendoor
OpendoorNASDAQ: OPEN: Digital marketplace for buying and selling residential real estate.
5+ YOE5+ years application security or security-focused software engineering; hands-on with Go/Python/TypeScript/Ruby; experience with AppSec toolchains, cloud/Kubernetes security, threat modeling, and automation.
Go, Python, TypeScript, Ruby, Terraform, AWS, GCP, Azure, Kubernetes, Apollo GraphQL, GitHub Advanced Security (CodeQL, Dependabot, secret scanning), Semgrep, HackerOne, Burp Suite, Cloudflare WAF, Claude, OpenAI, MCP
2mo
Save
Mark Applied
Hide
Staff Product Security Engineer, Reviews
Toronto, Ontario, Canada
$141k-$194k/yr HybridFull Time
Okta
OktaNASDAQ: OKTA: Provide secure identity management and authentication for enterprises.
Conduct security reviews, manual code review and penetration testing; expertise in authentication protocols (OIDC, SAML, OAuth), threat modeling, LLM/AI security, automation with scripting, and communicating remediation to stakeholders.
Java, Go, Python, C, C++, Bash, LLMs, OIDC, SAML, OAuth, OWASP, CWE, SAST, DAST, SCA, fuzzing, iOS, Android, Windows, macOS
2w
Save
Mark Applied
Hide
Senior Identity Engineer
Boston or Chicago or Los Angeles or New York City or San Francisco or Toronto or Vancouver or Vancouver or United States
$110k-$160k/yr HybridFull Time
Later
Later: Provides software for social media scheduling and influencer marketing.
5+ YOERequires 5–7+ years in security or software engineering, IAM, application and infrastructure security, secure CI/CD, cloud security, compliance frameworks, and modern backend systems including C#.
AWS Security Hub, Azure Security Center, GCP Security Command Center, Terraform, CloudFormation, C#, OWASP, NIST, CIS Controls, SOC 2, ISO 27001, SAST, DAST, SCA, SIEM, SOAR, CI/CD
2w
Save
Mark Applied
Hide
QA Lead Engineer
Toronto, Ontario, Canada
$150k/yr HybridFull Time
WagJag
WagJag: Canadian online marketplace for discounts and local offers.
7+ YOE2+ MgmtRequires 7+ years of software quality engineering experience, including 2+ years in a lead or senior role; expertise in API testing, Playwright or pytest, CI/CD, Git workflows, web testing, and QA leadership.
Postman, Playwright, pytest, GitHub Actions, Git, browser DevTools, k6, Locust, Pact, OWASP, Sentry, Grafana, Agile, Scrum
3w
Save
Mark Applied
Hide
Software Supply Chain Security Engineer
Quincy or Toronto or Austin or Atlanta
$90k-$158k/yr OnsiteFull Time
State Street
State StreetNYSE: STT: Provides investment servicing and management to institutional investors.
6+ YOE6+ years experience in application and software supply chain security, CI/CD, AppSec, artifact management, cloud (Azure/AWS), automation, and strong communication skills.
JFrog Artifactory, Maven Central, PyPI, SLSA, Java, .Net, Python, Node.js, Azure, AWS, Ansible, Terraform, Kubernetes
2mo
Save
Mark Applied
Hide
Staff Engineer
Calgary or Phoenix or Scottsdale or Pittsburgh or Columbus or Orlando or St. Louis or Edmonton or Halifax or Moncton or Ottawa or Toronto or Winnipeg or Vancouver
$200k-$240k/yr RemoteFull Time
ZayZoon
ZayZoon: Provides employees with instant access to their earned wages.
6+ YOE6+ years with Ruby on Rails, strong OO and DDD fundamentals, experience with scale/concurrency/queuing/background processing, AWS/RDS/serverless experience, SQL/ETL/data-warehouse skills, security mindset (OWASP, SOC-2), and experience applying AI to workflows.
Ruby on Rails, AWS, RDS, SQL, OWASP, SOC-2, Domain-driven design (DDD), microservices, serverless, ETL, AI
3w
Save
Mark Applied
Hide
Senior Software Engineer, Operations
North York or Toronto or Waterloo
$90k-$140k/yr HybridFull Time
Sun Life
Sun LifeToronto Stock Exchange: SLF: Provides insurance, retirement, and asset management services globally.
7+ YOE7+ years Java application support/development with incident management and on-call; experience with monitoring, automation, cloud (AWS), DevOps tools; Canadian enhanced reliability security clearance required.
Java, JavaScript, HTML, XML, CSS, Java Enterprise Edition (J2EE), Servlet, JDBC, JSP, Spring, ReactJS, Angular, Kubernetes, Docker, OWASP, SOAP, REST API, JSON, Spring Boot, SQL, Oracle, POSTGRES, Jenkins, Artifactory, Bitbucket, Git, Gradle, Maven, CDD, Ansible, MFA, AWS, Confluence, JIRA, Service Now, MS Teams, Kafka, WebSphere, WebLogic
1w
Save
Mark Applied
Hide
Sr. Staff Security Engineer
United States or Toronto
RemoteFull Time
OpenLoop
OpenLoop: Provides white-label infrastructure and clinical support for virtual care.
10+ YOEBachelor's degree or equivalent experience; 10+ years of security experience, including 5+ in security architecture. Requires cloud, application, identity, network, data protection, threat modeling, SSDLC, authentication, HIPAA, NIST, HITRUST, and SOC 2 expertise.
OAuth, OIDC, SAML, HL7, FHIR, STRIDE, PASTA, OWASP, PKI, SABSA, TOGAF, Microsoft 401(k)
3mo
Save
Mark Applied
Hide
Java Developer (260878)
Toronto, Ontario, Canada
OnsiteFull Time
Scotiabank
ScotiabankToronto Stock Exchange: BNS: Provides global personal, commercial, and investment banking services.
10+ YOE10+ years full-stack Java development experience with Struts, JSP, SQL, REST and SOAP; experience with IBM WebSphere/DB2/MQ, Git/Maven/Gradle/Jenkins, Eclipse, Confluence, JIRA; strong security and cloud integration knowledge.
Java, Struts, JSP, HTML5, CSS3, JavaScript, jQuery, SQL, REST APIs, SOAP services, Spring MVC, Spring Boot, AS400, Unix, IBM WebSphere, IBM DB2, IBM MQ, Git, Maven, Gradle, Jenkins, Eclipse, Confluence, JIRA, CheckMarx, BlackDuck, WebInspect, OWASP
2mo
Save
Mark Applied
Hide
Software Developer Sr
Toronto or Canada
$106k-$165k/yr RemoteFull Time
Dayforce
Dayforce: Provides cloud-based human capital management software and services.
5+ YOE5+ years C#/.NET experience, 2–3+ years React and TypeScript, strong SQL Server skills, Docker/CI/CD and cloud (Azure/AWS/GCP) experience, automated testing and security (OWASP, OAuth2/OIDC).
C#, .NET, .NET 6, .NET 7, .NET 8, React, TypeScript, HTML5, CSS3, SVG, JSON, REST APIs, Web APIs, LINQ, ASP.NET Core/MVC, SQL Server, Docker, CI/CD, Azure, AWS, GCP, GitHub Copilot, Codeium, Sourcegraph Cody, OpenTelemetry, Application Insights, Prometheus, Kafka, Azure Service Bus, Redis, LaunchDarkly, OWASP, OAuth2/OIDC, LLM
2w
Save
Mark Applied
Hide
Senior Security Engineer (Global Security)
Toronto or Vancouver
OnsiteFull Time
Royal Bank of Canada
Royal Bank of CanadaTSX: RY: Provides personal, commercial, and investment banking services worldwide.
5+ YOERequires 5+ years of software development experience focused on Python, REST APIs, and containers; security framework knowledge; AI frameworks and libraries; Git, cloud platforms, databases, and collaboration skills.
OWASP, SANS, Python, REST APIs, FastAPI, LangChain, LangGraph, NumPy, Pandas, scikit-learn, Git, GitHub Actions, OCP, Microsoft Azure, AWS, SOAP, SQL, NoSQL, Docker, MLOps
1w
Save
Mark Applied
Hide
Ingénieur(e) sécurité applicative - Cybersécurité - Toulouse
Colomiers or Toulouse or Toronto or Singapore
HybridFull Time
Sopra Steria
Sopra SteriaEuronext Paris: SOPR: Provides digital transformation consulting and information technology services.
6+ YOEEngineering or university-equivalent degree and at least 6 years in application security; experience with security projects, governance, DevSecOps tools, programming languages, security frameworks, and fluent written and spoken English.
Java, .Net, JavaScript, Angular, GitLab, Jenkins, Checkmarx, Sysdig, HashiCorp Vault, Kubernetes, OWASP, OWASP Top Ten, MITRE ATT&CK, SAMM, ASVS, NIST