DevOps SecApp role

Requisition ID: 21758 

Job Category: Information Technology 

With over six decades of business and technical experience in the mining, energy, and infrastructure sectors, we understand that challenges are changing rapidly in every industry. We respond quickly with solutions that are smarter, more efficient, and innovative. We draw upon our 9,000 staff with experience in over 150 countries to challenge the status quo and create positive change for our clients, our employees, and the communities we serve.

Hatch is currently seeking an Application Security Developer Lead to join our Hatch Digital team in Toronto and apply expertise in current digital technologies to provide competitive solutions to business challenges.  The Application Security Lead will provide technical leadership and be the hands-on champion for application security tools, technologies, solutions and best practices. You will be collaborating with the technology product teams acting as a strategist and mentor to other developers to uplift the overall security of the business’ products and solutions.

They are a steward of digital technology security standards collaborating with global digital peers. You will be able to engage with internal and external stakeholders, technology vendors and development teams to assess requirements, make recommendations, gain consensus, communicate results and contribute to hands-on implementation. You will be motivated by the desire to deliver sound, effective and sustainable solutions that demonstrate improved business outcomes.

The successful candidate will have demonstrated hands-on experience related to application security of relevant digital technologies, this will involve:

• Assess industry and technology solutions to establish optimum application security supporting advancement of digital product objectives
• Evaluate short-term or long-term priorities, and develop actionable plans to address
• Collaborate with internal stakeholders, clients, solution vendors and end users to identify business requirements and translate these into technical specifications, policies and solutions for application security
• Assist in defining the business application security road-maps, standards and best practices
• Perform the role for hands-on delivery of major priority projects associated to application security
• Leverage external industry knowledge, standards and advances to further internal objectives
• Stay abreast of market directions and competitor capabilities
• Ability to participate and contribute to multiple teams and projects on all things application security including contributing to product backlogs for security considerations
• Mentor and educate teams, individuals and business leaders on application security requirements and best practices

Key Responsibilities

• Work in close partnership with Product Managers, Solution Architects and Managers on matters relating to security of their current and future applications being produced and supported by the organization
• Evaluate the design, quality, stability and maintainability of applications from a security perspective
• Present strategies and articulate recommendations to stakeholders
• Actively coach and mentor other developers in your business groups around application security
• Provide direction for internal and external development resources to deliver solutions
• Identify and report initiative progress, challenges and risks including key performance to find areas for improvement
• Assist with preparation and delivery of client presentations and proposals
• Hands on delivery of senior application security development needs

Skills and Experience

• Minimum of 8 years of experience in software development 
• Bachelor’s degree or equivalent combination of education, training or work experience
• 4+ years’ experience in Application Security
• Experience with Static Application Security Testing Tools like Fortify, AppScan, Veracode etc.
• Experience with Dynamic Application Security Testing Tools
• Experience implementing Continuous Integration and Continuous Delivery pipelines (DevOps / SecOps).
• Experience within an Agile development environment utilizing tools like JIRA and GIT.
• Must have the ability to generate reports and tailor communication strategies for various levels of technical staff, executive management, and business clients.
• Experience with Cloud Security (Azure)
• Experience driving compliance audits for SOC2 and similar (best practices, OWASP, etc.)
• Comfortable with Application Security vulnerabilities such as XXE, CSRF, SSRF, difference between XSS types, Open Redirects, RFI, LFI.
• Ability to lead and mentor junior developers
• Excellent written and verbal communication skills interfacing with Executives and teams at all working levels.
• Security Certification such as: CISSP, CISA, GIAC, CEH etc.

We are committed to fostering a workforce in each of our locations that reflects the diversity of the communities in which we operate. Hatch is an Equal Opportunity Employer that considers employment applicants without regard to age, race, colour, national origin, citizenship, religion, creed, sex, sexual orientation, marital status, disability or any other protected status. If you have any special needs requirements, please let us know. We will do our utmost to accommodate, in accordance with applicable local legislation.