Senior Application Security Engineer

📋 Description

• Define best practices for secure coding and design reviews.
• Integrate SAST, DAST, and SCA in CI/CD pipelines (GitHub Actions).
• Partner with developers to identify risks early in the lifecycle.
• Implement secrets handling and API authentication/authorization best practices.
• Build security guidelines and reusable patterns to ship secure code faster.
• Automate evidence gathering and control enforcement for SOC 2 and ISO 27001.

🎯 Requirements

• 6+ years in security engineering, DevSecOps, or related roles.
• Excellent communication and teamwork abilities.
• Strong experience integrating security into modern SDLC pipelines.
• Hands-on with AppSec tooling (Snyk, OWASP ZAP, Burp Suite).
• Solid understanding of web app security (OWASP Top 10, API security).
• Familiarity with AWS/Kubernetes security.

🎁 Benefits

• Canary Days: monthly company-wide days off.
• Self Improvement Club with a personal-goal budget.
• Professional Development Chats with a cross-functional budget.
• Travel reimbursement to visit NY, SF, or Dallas offices.
• Personal travel credit with Canary partner hotels.
• Canary is an equal opportunity employer.