Software Engineer – Software Security Remediation

Location: Saint-Laurent, Montreal, QC

Duration: Till end of this year, potential to continue in 2027 as well.

About the Role

Our client is looking for a Software Engineer to help remediate a backlog of software security findings across its product portfolio. This is a hands-on engineering role focused on identifying, fixing, testing, and closing software vulnerabilities while maintaining software quality and security standards.

The successful candidate will work within existing codebases and use software security tools and CI/CD processes to resolve security findings efficiently.

Key Responsibilities

- Remediate software security findings across the product portfolio, including:
- SAST/static-analysis findings
- SCA/dependency vulnerabilities
- Vulnerable third-party libraries
- Secrets/credential exposure
- Container and base-image vulnerabilities
- Make hands-on changes to source code and dependencies to resolve security vulnerabilities.
- Investigate security findings and determine whether they are genuine vulnerabilities or false positives.
- Document false positives and provide appropriate justification.
- Re-scan and test fixes to verify that vulnerabilities have been properly resolved.
- Prioritize remediation based on exploitability and potential impact.
- Escalate findings requiring specialized product knowledge, particularly those involving safety-critical, real-time, embedded, firmware, or proprietary vision/robotics functionality.




- Work within Git-based development workflows and CI/CD security gates.
- Maintain software quality, code-signing, and supply-chain security requirements.
- Track remediation progress and report on backlog status.

Required Qualifications
- 4+ years of professional software development experience.
- Robust programming experience in one or more of:
- C, C++, C#, Python, JavaScript, or TypeScript.
- Hands-on experience identifying and remediating software security vulnerabilities .
- Experience working with SAST and/or SCA tools .
- Experience with dependency management and upgrading vulnerable third-party libraries.
- Understanding of common software vulnerabilities and their real-world impact.
- Experience with Git and CI/CD pipelines.
- Ability to investigate security findings and distinguish between:
- Genuine vulnerabilities
- False positives
- Issues requiring escalation
- Bachelor's degree in Computer Science or equivalent practical experience.

Preferred Qualifications
- Application Security (AppSec) or software security experience.
- Experience with embedded, firmware, robotics, machine vision, imaging, or real-time software.
- Experience with tools such as Coverity, Checkmarx, Fortify, SonarQube, Veracode, Semgrep, Black Duck, Snyk, Mend, or similar.
- Exposure to secrets scanning, container security, SBOMs, or code signing.
- Experience working in safety-relevant or security-sensitive products.

📌 Software Security Engineer (Montreal)
🏢 ExcelGens
📍 Montreal