Application Security Specialist
EXFO
full-time
Posted on:
Location Type: Hybrid
Location: Saint-Laurent • Canada
Visit company websiteExplore more
Tech Stack
About the role
- Develop, lead, and execute the strategy to ensure application security at EXFO.
- Conduct risk and vulnerability assessments at the system and application levels.
- Propose effective risk mitigation measures while participating in security awareness programs.
- Develop and implement application security controls.
- Provide security expertise, including during product design.
- Meet with application and product teams to discuss remediation of vulnerabilities.
- Deliver timely, detailed reports with supporting evidence of findings, risk analyses, recommendations, and remediation guidance.
Requirements
- 8+ years of experience in software/application security
- Bilingual in French and English
- Bachelor's degree in Computer Science or a related discipline
- General understanding of regulations and best practices for security and data protection
- Knowledge of application security testing methods and tools
- Familiarity with OWASP, SSDLC, and DevSecOps
- Knowledge of security controls and best practices in Cloud Native environments (Kubernetes, Docker, AWS, Azure)
- Knowledge of cryptography (PKI, digital signatures, SSL/TLS)
- Actively engaged with the broader security community
- Understanding of common hacker/attacker methods
- Software development experience considered an asset
- Knowledge of infrastructure security considered an asset
- (ISC)² CSSLP, CEH security certifications considered an asset
- Knowledge of telecommunications technologies/industry considered an asset
Benefits
- Flexible working hours
- Multi-site, multidisciplinary teams
- Dynamic, collaborative work environment
- Modern workspace
- Agile working methodology
- Variety of social and sporting activities
- Community involvement
- Free parking
- Electric vehicle charging stations
- Accessible by public transit
- Bike paths nearby
- On-site cafeteria
- Competitive vacation and holiday leave
- Annual bonus program
- RRSP retirement savings program and group insurance/benefits
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
application securityrisk assessmentvulnerability assessmentrisk mitigationapplication security controlssecurity testing methodscryptographyinfrastructure securitysoftware developmentCloud Native security
Soft skills
leadershipcommunicationcollaborationsecurity awarenessreportingproblem-solvingengagement
Certifications
(ISC)² CSSLPCEH