Senior Application Security Engineer – Snyk, SAST, SCA & DAST
Posted
Summary
Senior application security engineer in Toronto focused on enterprise AppSec tooling: hands-on Snyk administration plus SAST, SCA and DAST platforms, including migrating tooling from Veracode to Snyk. The role supports regulated-industry work and requires knowledge of NIST, OWASP, ISO 27001, PCI DSS and SOC 2.
Senior Application Security Engineer – Snyk, SAST, SCA & DAST
• 10 years of experience in Application Security, Cybersecurity, or DevSecOps.
• 5 years of hands-on experience with enterprise SAST, SCA, and DAST platforms.
• 3 years of implementation, administration, or engineering experience with Snyk.
• Demonstrated experience migrating application security tooling, preferably from Veracode to Snyk, in a large enterprise environment.
• Experience supporting regulated industries such as banking, financial services, insurance, healthcare, or government.
• Snyk product certifications or advanced Snyk platform training. CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials.
• Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.