Canary Technologies

2 weeks ago

Senior Application Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Embed application security into the SDLC by owning security tooling strategy, automation, and developer enablement. Partner with developers, SREs, infra, and data engineers to make secure design the default—integrating SAST/DAST/SCA into CI/CD, implementing secrets handling and IAM least-privilege, and remediating vulnerabilities across containers, dependencies, and IaC. Drive security guidelines, training, monitoring, and SOC 2/ISO control evidence gathering.

Location: Argentina

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Define and enforce secure coding best practices, including dependency management and design reviews across engineering teams.
•Integrate and manage SAST/DAST/SCA tools in CI/CD pipelines such as GitHub Actions.
•Partner with developers to identify security risks early and implement secure secrets handling, API auth, and data protection.
•Build security guidelines, training, and reusable libraries/patterns to accelerate secure shipping.
•Triage and remediate vulnerabilities from scans/bug bounties and implement monitoring, alerting, and evidence gathering for SOC 2 and ISO 27001.

Pay and Benefits

Perks:Learning BudgetTravel Allowance

Key Requirements

•6+ years in security engineering or DevSecOps roles, including experience at scale.
•Strong experience integrating security into modern SDLC pipelines and CI/CD.
•Hands-on AppSec tooling such as Snyk, OWASP ZAP, Burp Suite, SonarQube, and Checkmarx.
•Solid understanding of web application security (OWASP Top 10, API security, auth flows, input validation).
•Strong cloud and cloud-native security experience with AWS/Kubernetes plus tools and IaC practices (Terraform, Helm, GitOps).

Experience:6+ yearsDevSecOpsSDLCWeb application securityCloud-native securityKubernetesAWSAppSec

Skills:CommunicationTeamworkRisk triageCollaborationSecurity adoption enablement

Tech Stack:SASTDASTSCAGitHub ActionsSnykOWASP ZAPBurp SuiteSonarQubeCheckmarxOWASP Top 10AWSKubernetesIAMKMSSecurity HubGuardDutyWAFRBACOPA/GatekeeperNetwork policies

Company Brief

Canary Technologies

Provides cloud-connected environmental monitoring and analytics for commercial properties, combining IoT sensors and a SaaS platform to track HVAC performance, energy use, and indoor air quality for predictive maintenance and operational efficiency.

Industry: Facility Management

Website

Loading job details...

Preparing the role view and application actions.

Canary Technologies

2 weeks ago

Senior Application Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 6 hours agoStatus: Live

Job Summary

Location: Argentina

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Define and enforce secure coding best practices, including dependency management and design reviews across engineering teams.
•Integrate and manage SAST/DAST/SCA tools in CI/CD pipelines such as GitHub Actions.
•Partner with developers to identify security risks early and implement secure secrets handling, API auth, and data protection.
•Build security guidelines, training, and reusable libraries/patterns to accelerate secure shipping.
•Triage and remediate vulnerabilities from scans/bug bounties and implement monitoring, alerting, and evidence gathering for SOC 2 and ISO 27001.

Pay and Benefits

Perks:Learning BudgetTravel Allowance

Key Requirements

•6+ years in security engineering or DevSecOps roles, including experience at scale.
•Strong experience integrating security into modern SDLC pipelines and CI/CD.
•Hands-on AppSec tooling such as Snyk, OWASP ZAP, Burp Suite, SonarQube, and Checkmarx.
•Solid understanding of web application security (OWASP Top 10, API security, auth flows, input validation).
•Strong cloud and cloud-native security experience with AWS/Kubernetes plus tools and IaC practices (Terraform, Helm, GitOps).

Experience:6+ yearsDevSecOpsSDLCWeb application securityCloud-native securityKubernetesAWSAppSec

Skills:CommunicationTeamworkRisk triageCollaborationSecurity adoption enablement

Tech Stack:SASTDASTSCAGitHub ActionsSnykOWASP ZAPBurp SuiteSonarQubeCheckmarxOWASP Top 10AWSKubernetesIAMKMSSecurity HubGuardDutyWAFRBACOPA/GatekeeperNetwork policies

Company Brief

Canary Technologies

Industry: Facility Management

Website