Senior Software Engineer (Security)
Super
- Canada
- Senior Level
- 5+ years
- Posted
Skills
Required
- AppSec
- DevSecOps
- offensive security
- designing and embedding security
- CI/CD pipelines
- SDLC
- threat modeling
- secure design
- Python
- Burp Suite
- KCSA
Preferred
- software development
- AI / LLMs
- Open-source security tool development
Join our Security team as a Senior Software Engineer, where you'll shape the direction of our security tooling and AppSec practices. Your work will involve hardening product design and building innovative security tools. You'll report to our Staff Software Engineer - Security and collaborate closely with product engineers, DevOps, and Fraud. Expect high autonomy, frequent collaboration, and a fast-paced environment. You'll take security initiatives end-to-end, mentor other engineers, and raise the bar for security practices across engineering.
Contribuer à la conception et à l'évolution de l'architecture DevSecOps, en décidant comment la sécurité est intégrée tout au long du cycle de vie du développement logiciel.
Hands-on cloud infrastructure or cloud security experience (AWS, Kubernetes)
Strong communicator who can influence and drive security work across engineering, DevOps, and leadership
Mobile development or mobile security experience
About Super
Mentorer et développer les ingénieurs de l'équipe, et établir des normes élevées pour ce à quoi ressemble un bon travail de sécurité.
Responsibilities
- Diriger le travail de sécurité offensif avancé, en enchaînant les vulnérabilités et en construisant des preuves de concept qui démontrent un impact commercial réel.
Requirements
- 5+ years working in security (AppSec, DevSecOps, offensive security, or similar)
- Track record of leading security initiatives and mentoring or developing other engineers
- Experience designing and embedding security across CI/CD pipelines and the SDLC
- Experience leading threat modeling and secure design across engineering projects
Comfortable writing and maintaining code (Python preferred)
- Professional offensive security experience, with a proven ability to find, chain, and exploit complex vulnerabilities in applications and infrastructure
- Relevant security certifications (e.g., Burp Suite Certified Practitioner, KCSA, AWS SCS, or similar)
- Published security research, CVEs, or conference talks
Preferred
- Professional software development experience
- Experience applying AI/LLMs to security or engineering workflows
- Open-source security tool development or contributions
jobapplier