Remote Application Security Engineer

Summary

The job is for a Security Engineer at CoLab who will work closely with product development teams to ensure security across the software development lifecycle. The role involves conducting penetration tests, providing remediation guidance, and continuously evolving application security culture.

Requirements

• 2-5 years of professional experience in a development or security role
• Committed to continuous learning and self-improvement. Willing to work towards a technical penetration testing certification such as the OSCP, OSWA or similar

Responsibilities

• Conduct frequent web app and integration penetration tests to identify vulnerabilities
• Work as a core member of multiple development teams to review designs, stay updated on implementation changes, build trust, and identify security issues early in development
• Accurately convey complex risks to engineering, product and technical leadership
• Work with the Security team to help shape and evolve our application security processes and culture
• Become an offensive security subject matter expert
• Develop and maintain automated security tests to continuously improve security coverage in our CI/CD pipeline
• Participate in the development and promotion of our internal Application Security resource library, equipping developers with the tools to conduct security audits of their own code

Benefits

• This is a full-time, permanent position with an attractive compensation package that includes a stock options package
• Canada: This role offers an extended health and benefits package that includes unlimited paid vacation and RRSP matching
• USA: This role offers health and dental insurance (covered at 100% for the employee) and unlimited PTO
• Remote/Hybrid Work: Our main office location is in St. John’s, NL where we offer hybrid and remote opportunities. This role has the flexibility to work from anywhere within eastern Canada or eastern USA