Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Application Security Engineer

Home > Python programming jobs

Application Security Engineer in Canada new

  • Centrica plc
  • Full time
  • Email
  • Windsor

Responsibilities

  • Embed security best practices into the software development lifecycle in collaboration with DevOps and engineering teams.
  • Provide guidance on secure design, implementation, architecture, API security, microservices, and cloud-native application security.
  • Conduct manual security assessments and coordinate third-party security engagements.
  • Review SAST, DAST, and SCA findings and drive vulnerability remediation through closure.
  • Provide application security support and improve security processes, tooling, and ways of working.
  • Lead or contribute to the Security Champions programme and support GSOC and CSIRT teams with application-layer security incidents.
  • Support third-party supply chain security and developer security training or enablement.

Requirements

  • Strong hands-on application security experience and knowledge of secure software development, OWASP Top 10, common application vulnerabilities, and secure SDLC practices.
  • Proficiency in one or more programming languages, such as Python or JavaScript, for security automation, tooling, or custom rule development.
  • Experience with cloud platforms such as AWS, Azure, or SAP and knowledge of application architectures, container security, API security, network protocols, OAuth 2.0, OIDC, and SAML.
  • Working knowledge of DevOps pipelines, repositories, and CI/CD security integration using platforms such as Azure DevOps and GitHub Actions.
  • Experience with SAST, DAST, SCA, container scanning, vulnerability management, SBOM tooling such as CycloneDX, infrastructure-as-code security across Terraform, Bicep, and Ansible, Trivy, Policy as Code, and threat modelling.
  • Ability to guide engineering teams, support third-party supply chain security, and communicate complex security topics practically.
  • Desirable qualifications include GWAPT, GWEB, OSCP, or AWS Security Specialty certifications, plus Security Champions, developer training, SOC, or incident response experience.

Benefits

  • UK-based hybrid work arrangement with occasional travel to site.
  • 15% Employee Energy Allowance.
  • Comprehensive pension plan.
  • Fully funded company healthcare plan.
  • 25 days of holiday plus public holidays, with the option to purchase up to five additional days.
  • Flexible benefits including technology benefits, eco-friendly car leases, and travel insurance.

Centrica plc

Centrica plc supplies gas, electricity, and related services to homes and businesses, primarily in the UK and Ireland, through brands such as British Gas and Bord Gáis Energy. It also trades energy, manages storage and distributed energy assets, and provides home services and connected-home techn...

Similar positions

Senior Data Engineer

  • Chip
  • Full time
  • Remote
  • 09/22/2026
  • Salary: GBP 70,000 - 80,000
  • UK

Software Engineer, AI & Data Systems

  • Clera
  • Full time
  • USA
  • 09/22/2026
  • Salary: $200k - $280k/yr
  • San Francisco, CA

Software Engineering Professional

  • BT
  • Full time
  • Others
  • 09/22/2026
  • Bengaluru, India

Senior Software Engineer, Flight + Plan

  • Quindar
  • Full time
  • USA
  • 09/22/2026
  • Salary: $140k - $180k/yr
  • Denver, CO

Senior Software Engineer, Add-Ons

  • Mozilla
  • Full time
  • Remote
  • 09/22/2026
  • Salary: N/A 512,925 - 683,900
  • Europe, Sweden