Application Security Engineer

Location: Toronto - 100 Adelaide St W

Venture outside the ordinary - TMX Careers

The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we’re connecting cross-functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress. Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team.

Ready to be part of the action?

An Application Security Engineer will be responsible for implementing the design and

execution of our Application Security Programme including architecting secure design

principles, identifying complex vulnerabilities, conducting security assessments and working

closely with development teams to promote secure coding practices.

Primary Responsibilities

• Lead, and execute ongoing application security testing against the organisation’s product suite.
• Collaborate with development and product teams to design secure application architectures that meet business requirements while minimizing security risks.
• Perform thorough code reviews to identify security flaws, coding errors and potential attack vectors in application codebases.
• Articulate complex technical vulnerabilities in a clear, actionable manner to key stakeholders, including development teams, product owners, and executive leadership.
• Provide guidance on the application vulnerability management lifecycle, tracking vulnerabilities according to our risk management process and ensuring development teams successfully resolve identified issues.
• Provide guidance to developers and other team members on secure coding practices, security best practices and latest security trends.
• Maintain Key Performance Indicator (KPI) reports and metrics summarizing the organization's application security posture.
• Stay up to date with the latest security tools and technologies & evaluate their effectiveness in streamlining application security objectives.
• Ensure applications adhere to relevant security standards, regulations & industry best practices.
• Identify advanced application-level security vulnerabilities in our products using modern penetration testing techniques and threat modeling.
• Create and maintain detailed documentation related to application security architectures, design decisions and security guidelines.