We are seeking an experienced Application Security Engineer with strong .NET Framework expertise to join the Productivity and Collaboration fleet within Workforce Technology.We are strengthening the security, quality and resilience of the applications and services used by employees across the firm. As an engineer in the Productivity and Collaboration fleet, the successful candidate will review, harden and improve code across our internal .NET repositories to meet the highest standards of secure engineering.

The candidate will be involved in all phases of the software development lifecycle and will collaborate with other squad members to deliver measurable value to our stakeholders.

RESPONSIBILITIES

Review, harden and improve code across internal .NET Framework applications and services

Build and run automation in PowerShell to analyse, improve and harden code across internal repositories

Partner with development squads to embed secure coding practices throughout the software development lifecycle

Strengthen existing application features and remediate findings raised through code review and security tooling





Enhance the team's use of automated security testing within Continuous Integration/Continuous Delivery pipelines

Perform code reviews and contribute to secure-by-design standards, patterns and guidance

Support and improve the team's adoption of agile principles: participate in sprint retrospectives and demos as needed

SKILLS REQUIRED

8+ years or more of software development experience

Strong hands-on expertise with the .NET Framework (C#, ASP.NET)

Demonstrable application security experience

Secure coding, code review and remediation

Familiarity with recognised application security standards (e.g. OWASP)

Hands on experience with Continuous Integration/Continuous Delivery

Hands on experience with Agile development (Scrum, Kanban)

Understanding of SDLC and secure CI/CD processes

Hands on experience with Jira or other issue-tracking systems

NICE TO HAVE SKILLS

.NET Core

Experience writing Powershell scripts

Static and energetic application security testing (SAST/DAST) tools

Threat modelling experience

Secure software development certification (e.g. CSSLP)

SQL and Database Design

📌 .Net Application Security Developer (Montreal)
🏢 Open Systems Technologies
📍 Montreal