Product Security Specialist (Quebec City)

Job Purpose

The Product Security Specialist is responsible for ensuring products are secure before release by embedding security into the development lifecycle. This role focuses on automated security testing, vulnerability detection, and compliance validation of release candidates, enabling the organization to ship secure, resilient, and compliant products at scale.

Duties and Responsibilities

Product & Application Security

• Perform security testing on release candidates prior to production deployment
• Identify, assess, and validate security vulnerabilities in applications, APIs, and services
• Conduct threat modeling and security design reviews for new features and products
• Simulate realistic attack scenarios to evaluate product resilience

Security Automation & Tooling

• Develop and maintain automated security testing scripts and tools
• Integrate SAST, DAST, SCA, container, and API security scans into CI/CD pipelines
• Improve detection accuracy and reduce false positives in security tooling
• Treat security tests and controls as code

Vulnerability Management

• Triage and prioritize vulnerabilities based on risk and exploitability
• Work closely with engineering teams to remediate findings before release
• Validate fixes and prevent regressions through automated testing

Compliance & Secure SDLC

• Automate security controls that support regulatory and compliance requirements (e.g., SOC 2, ISO 27001)
• Ensure release candidates meet internal security standards and policies
• Provide security sign‑off or release gating based on risk assessment

Qualifications

• Bachelor’s degree in computer science, Information Security, or a related field (or equivalent experience)
• 3‑5 years of experience in IT security, DevSecOps, or a related role
• Strong programming background
• Familiarity with Terraform
• Familiarity with Tenable vulnerability scanning (Nessus, Vulnerability Management, Security Center)
• Familiarity with security automation tools (SAST, DAST, SCA, container scanning, API security, etc)
• Robust knowledge of security frameworks, standards, and compliance requirements
• Excellent analytical, problem-solving, and communication skills
• Ability to collaborate effectively across cross‑functional teams