Application Security Engineer (.NET)

Summary:

• Location: Montreal
• Work Mode: Onsite (Day 1 onboarding onsite/in office presence 3x/week)
• Duration: 12 month contract

Responsibilities:

• Review, harden, and improve code across internal .NET Framework applications and services.
• Build and run automation in PowerShell to analyze, improve, and harden code across internal repositories.
• Partner with development squads to embed secure coding practices throughout the software development lifecycle.
• Strengthen existing application features and remediate findings raised through code review and security tooling.
• Enhance the team’s use of automated security testing within Continuous Integration/Continuous Delivery pipelines.
• Perform code reviews and contribute to secure-by-design standards, patterns, and guidance.
• Support and improve the team’s adoption of agile principles: participate in sprint retrospectives and demos as needed.

Requirements:

• Minimum 8 years of software development experience.
• Experience writing PowerShell scripts.
• Strong hands-on expertise with the .NET Framework (C#, ASP.NET).
• Demonstrable application security experience.
• Secure coding, code review, and remediation.
• Familiarity with recognized application security standards (e.g., OWASP).
• Hands-on experience with Continuous Integration/Continuous Delivery.
• Hands-on experience with Agile development (Scrum, Kanban).
• Understanding of SDLC and secure CI/CD processes.
• Hands-on experience with Jira or other issue-tracking systems.

Preferred Skills:

• .NET Core.
• Static and dynamic application security testing (SAST/DAST) tools.
• Threat modeling experience.
• Secure software development certification (e.g., CSSLP).
• SQL and Database Design.

This role is for an existing vacancy.