Senior Application Security Engineer – Snyk, SAST, SCA & DAST
The role involves implementing and administering application security tooling, specifically focusing on Snyk, SAST, SCA, and DAST platforms. The engineer will lead the migration of security tools in a large enterprise environment and support regulated industries.
- On-site
- Toronto, ON
- Posted Sep 4, 2026
- Apply by Oct 4, 2026
- 1 position
Opens an external site
More jobs you can apply to directly
Similar opportunities posted by employers hiring on Jobs.ca, with no external application form.
Job summary
Senior Application Security Engineer – Snyk, SAST, SCA & DAST • 10 years of experience in Application Security, Cybersecurity, or DevSecOps. • 5 years of hands-on experience with enterprise SAST, SCA, and DAST platforms. • 3 years of implementation, administration, or engineering experience with Snyk. • Demonstrated experience migrating application security tooling, preferably from Veracode to Snyk, in a large enterprise environment. • Experience supporting regulated industries such as banking, financial services, insurance, healthcare, or government. • Snyk product certifications or advanced Snyk platform training. CISSP, CSSLP, GWAPT, GWEB, CEH, Azure Security Engineer, AWS Security Specialty, or equivalent credentials. • Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity Framework, OWASP Top 10, OWASP API Security Top 10, CWE/SANS Top 25, ISO 27001, PCI DSS, and SOC 2.
What you’ll do
The role involves implementing and administering application security tooling, specifically focusing on Snyk, SAST, SCA, and DAST platforms. The engineer will lead the migration of security tools in a large enterprise environment and support regulated industries.
Requirements
Requires over 10 years of experience in Application Security or DevSecOps, with specific expertise in Snyk and enterprise security platforms. Candidates should hold advanced certifications like CISSP or AWS/Azure Security and possess deep knowledge of NIST and OWASP frameworks.
Listed skills
- SoftwarePreferred
- Microsoft AzurePreferred
- OrganizationPreferred
- Attention to detailPreferred
- DevelopmentPreferred
- Amazon Web ServicesPreferred
Other relevant skills
Identified from the job description. Confirm important requirements above.
- Application Security
- Snyk
- SAST
- SCA
- DAST
- DevSecOps
- Cybersecurity
- Veracode Migration
- NIST SSDF
- OWASP Top 10
- ISO 27001
- PCI DSS
- SOC 2
- Azure Security
- AWS Security
Job areas
- Security & Safety
- Software
- Technology
- Engineering
- Consulting
Additional details
- Minimum education
- Professional degree
- Minimum experience
- 10+ years
- Apply by
- Oct 4, 2026
- Posting language
- English
- Working hours
- 40 hours per week
- Seniority
- Mid-Senior level
- Application method
- Direct apply is available