Application Security Engineer
Full-time
Opendoor
Responsibilities
- Define, build, and operate application vulnerability identification, triage, and remediation capabilities across consumer products, internal tools, and GraphQL APIs.
- Assess and manage AppSec tooling for static and dynamic testing, software supply chain risk detection, and secrets scanning, integrating findings into GitHub, Linear, and Slack workflows.
- Own and mature the HackerOne bug bounty program and improve report triage, researcher relationships, and remediation follow-through.
- Lead threat modeling and security design reviews for services, APIs, and mobile features, and convert recurring patterns into rules, lint checks, and CI guardrails.
- Build AI agents and automated workflows for vulnerability triage, exploit validation, and remediation pull requests.
- Partner with engineering teams to improve authentication, authorization, input validation, GraphQL gateway security, and Kubernetes workload security.
- Build offensive security capabilities through internal security testing, red team exercises, and adversarial analysis.
- Establish secure-by-default standards for AI-enabled applications, MCP servers, and agent-driven workflows.
- Develop security design standards, participate in engineering rituals, and strengthen the organization’s security culture.
Requirements
- 5+ years of application security or software engineering experience with a security focus.
- Strong programming skills in at least one of Python, Go, TypeScript, or Ruby, with the ability to read and write the others.
- Track record of building agentic systems that replace reactive security work and manual processes.
- Hands-on deployment experience with GitHub Advanced Security, Semgrep, or equivalent security risk detection tools.
- Strong understanding of application and API vulnerability classes, including GraphQL, REST, and gRPC security issues.
- Practical threat modeling and security design review experience.
- Experience with AWS and Kubernetes cloud and container security, including identity and access management, secrets management, and CI/CD pipeline security.
- Experience with offensive security, penetration testing, API security, mobile security, red team operations, bug bounty programs, AI or machine learning pipeline security, agent frameworks, or MCP-style integrations is preferred.
- OSCP, OSWE, or similar offensive security certification is a bonus.
- Humility, curiosity, autonomy, and a business-enablement approach to security are expected.
Benefits
- Based in Opendoor’s downtown Toronto office.
- In-person work is required four days per week: Monday, Tuesday, Thursday, and Friday.
- Candidates must live within commuting distance of the Toronto office.
Vacancy posted 14 hours ago
Similar jobs that could be interesting for youBased on the Application Security Engineer in Toronto, ON vacancy
$162k - $420k per year
...organizations, Sentry is today’s application monitoring standard and our... .... About The Role The Security Team is responsible for... ...problems with creativity and an engineering mindset. We work at a company... ...the practices that keep Sentry secure as we grow: security reviews,...SuggestedHourly payFull time$126k - $154k per year
...stronger, more resilient businesses. We’re looking for an Application Security Engineer II who thrives on autonomy, curiosity, and impact. You'll... ...and AWS cloud infrastructure) ensuring our applications are secure from design to deployment. You’ll blend technical depth...SuggestedFull timeInternship$221k - $286k per year
...About the Cybersecurity team The Security Engineering team at Thumbtack is focused on enabling innovation at scale by making the secure path the easiest path. We believe strong... ...Own the long-term technical direction for application security across Thumbtack. Build prioritized...SuggestedLong term contractFull timeSeasonal workLocal area- ...Responsibilities Support and mature security review processes, including secure code review, architecture review,... ...activities. Partner with engineering and product teams to advocate for... ...workflows. Validate and reproduce application and infrastructure security findings...SuggestedFull time
- ...Starts Here We’re looking for a hands-on Staff Security Engineer to own and shape Homebase’s Application Security domain. This is a technical leadership role... ...you’ll define the multi-quarter strategy for how we secure our products, set architectural direction, and pioneer...SuggestedHourly payLong term contractFull timeTemporary workInternshipWork at officeLocal areaWork from home
$160k - $220k per year
...come join ours. About this role Our Engineering organization owns the software that makes our marketplace work. Our Application Security function is focused on keeping... ...practice and love to write software that is secure, tested, easy to maintain, and can scale...Work at officeLocal areaRemote workMonday to fridayShift work3 days per week$160k - $220k per year
...left tooling and CI/CD guardrails that make secure development the default. Own offensive... ...tools. Thorough understanding of web application security, OWASP Top 10, and common... ...Ability to explain security risk to product engineers and contribute credibly to design discussions...Full timeWork at officeRemote workMonday to fridayFlexible hoursShift work3 days per week- ...to execute and lead various security system projects. Your role will encompass estimation, engineering design, programming, commissioning... ...diversity and encourage applications from the candidates who are eager... ..., and recommend the most applicable system or technical solutions...Full timeFor contractorsWork at office
$155k - $165k per year
...Ready to make an impact on the security of products from the ground... ...security standards while guiding secure infrastructure across cloud,... ...models for a variety of application and game projects to identify... ...against any employee or job applicant because of their race, color,...Full timeCasual workShift work$69k - $114k per year
...coaching Deloitte Global is the engine of the Deloitte network. Our... ...day look like? The Application Segmentation Engineer candidate... ...Trust and micro segmentation security practices. The primary responsibility... ...policies utilizing Cisco Secure Workload and Illumio. Support...Permanent employmentRemote workFlexible hours- ...Senior Application Security Engineer – Snyk, SAST, SCA & DAST • 10 years of experience in Application Security, Cybersecurity, or DevSecOps.... ...Specialty, or equivalent credentials. • Knowledge of NIST Secure Software Development Framework (SSDF), NIST Cybersecurity...Permanent employment
$50k - $90k per year
...like? You will support the delivery of Application Security engagements across leading enterprise... ...and compliance challenges while enabling secure digital transformation. As part of... ...your privacy and using AI. We seek applicants with a range of skills and abilities....Long term contractPermanent employmentFlexible hours$90k - $125k per year
...Could you be the full-time Application Design Engineer – Supervision Control Center (SCC) in... ...specifications Operational context description if applicable Update data design documentation... ...Data Preparation for ATS, SCADA and Security System based on the Design Document and...Long term contractFull timeWorldwideFlexible hours- ...big! The Opportunity As a Senior Security Engineer, you will be a hands-on technical leader... ...strengthening security across Forma's application, cloud infrastructure, development lifecycle... ...processes, and help teams ship secure and reliable software. What you'll do...Full timeImmediate start
- ...Cohere is a team of researchers, engineers, designers, and more, who are... ...the future! As a Senior Security Engineer you will: Serve... ...Integrate security into our applications throughout the software development... ...available ~ You understand secure engineering best practices,...Full timeWork at officeRemote workFlexible hours
- ...other to improve. You’ll work alongside experienced operators, engineers, and leaders who have done this before and are building again at... ...progress, you’ll do well here. About the Role The Application Engineer is a key technical role within the Litmus Customer Success...Full timeInternshipShift work
$124k - $155k per year
...Merchants and Customers. About the Role We're looking for Application Engineers to join our Go-To-Market Technology (GTMT) team, where you'... ...systems and microservices architecture Notice to Applicants for Jobs Located in NYC or Remote Jobs Associated With Office...Long term contractFull timeWork at officeLocal areaRemote work$71.4k - $105.66k per year
...THE CHALLENGE Take-Two Security's goal is to empower our label... ...content. The Information Security Engineer will analyze and implement... ...and Data Security, & SOC applications. This includes developing new... ...across subsidiaries to ensure secure connectivity. You will also regularly...Full timeCasual work$100k - $110k per year
...The Opportunity Fullscript is looking for a Cloud Security Engineer to help secure the cloud platforms that power care delivery for millions... ...GraphQL, containerized workloads, or modern cloud-native applications. Cloud incident response, forensics, or threat hunting...Full timeRemote workFlexible hours$85k - $100k per year
...find plenty of reasons to SMILE! The Application Support Developer is responsible for... ...Collaborate cross-functionally with Product, Engineering, Support, and other stakeholders to... ...Ensure all delivered solutions meet security, privacy, quality, performance, and architectural...Remote jobLong term contractFull timeFlexible hours$150k - $190k per year
...performance and improve go-to-market agility. Our engineering organization includes multiple product application teams responsible for delivering core customer-facing... ...to the screening, filtering and shortlisting of applicants. Our commitment to you: Forma is a proud...Full time- ...customers audit us before they trust us — security and compliance are a precondition for... ...organization, GCP footprint, and internal engineering platform. This role covers our own... ...internal audit programmes, Statement of Applicability, risk treatment SOC 2 experience in practice...Full time
- ...Opportunity We're looking for a Staff Security Engineer to join Fullscript's Security... ...deep expertise in security engineering, application security, or product security. You'll... ...implementation; Understands how to build secure, scalable solutions in production environments...Long term contractFull timeRemote workFlexible hours
$163k - $253k per year
...organizations, Sentry is today’s application monitoring standard and our... .... About The Role The Security Team is responsible for... ...problems with creativity and an engineering mindset. We work at a company... ...that keep Sentry productive and secure as we grow. You’ll partner...Hourly payFull time$135k - $145k per year
...Security Engineer Advantage Group International is seeking a Security Engineer to join our Technology... ...skills – can mentor teams in secure development practices, champion new technologies... ...protocols across infrastructure and applications. Leading vulnerability triage,...Full timeFlexible hoursAfternoon shift1 day per week- ...independent retailers and brands. Security here isn't a compliance... ...automation that lets product engineers build securely by default, without... ...teams to develop and deploy secure software that makes that... ...systems across Faire's entire application stack. You will partner closely...Full timeWork at officeLocal areaRemote workMonday to friday3 days per week
- ...business value and inspires extraordinary results. The Support Engineer II role spec ifically supports our Emburse Enterprise platform... ...provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex,...Full timeLocal areaFlexible hoursAfternoon shift
$162k - $420k per year
...organizations, Sentry is today’s application monitoring standard and our... .... About The Role The Security Team is responsible for... ...problems with creativity and an engineering mindset. We work at a company... ...to practices that keep Sentry secure as we grow: alert triage for...Hourly payFull time- ...looking for contract Sr. Network Engineer, details are as below:... ...Winnipeg Role Title: Sr Network Security Engineer (8yr +), CL 18... ...network, endpoint protection, and secure web gateway Attention to... ...-depth understanding of Web Application Firewalls (WAF), Intrusion Prevention...RemplacementPermanent employmentFull timeContract workPart timeFor contractorsWork at officeShift work3 days per week
$153k - $240.5k per year
...MongoDB. We're looking for a Senior Cloud Security Engineer II to join our Security Engineering... ...go especially deep across three areas — secure architecture and threat modeling, detection... ...matters most — the person behind each application — we use AI-assisted tools at certain...Full timeInternshipWork at officeLocal areaFlexible hours
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Application Security Engineer. Be the first to apply!
Related searches
- application engineer Toronto, ON
- automation application engineer Toronto, ON
- software application developer Toronto, ON
- product security engineer Toronto, ON
- security engineering manager Toronto, ON
- physical security engineer Toronto, ON
- aws security engineer Toronto, ON
- security engineer remote Toronto, ON
- application engineer
- automation application engineer