About Highspring

Highspring is a next-generation consulting and professional services firm. We deliver modern, agile, and forward-thinking solutions to our clients across North America. We work with innovative organizations to help them modernize technology, strengthen security, and accelerate digital transformation. At Highspring, we believe in empowering our people, fostering technical leadership, and delivering meaningful business outcomes.

The Opportunity

We are seeking a Senior Application Security Developer to join a Highspring delivery team and help advance enterprise application security capabilities through automation, secure development practices, and AI-driven innovation.

This is a highly technical, development-focused role for an experienced professional with strong Python expertise and hands-on knowledge of Application Security, DevSecOps, cloud-native environments, and AI/LLM security. You will build and integrate security capabilities across the software development lifecycle while developing intelligent solutions that improve vulnerability detection, prioritization, analysis, and remediation.

What You'll Do

- Develop Python-based security applications, APIs, automations, and integrations.
- Design and implement security capabilities across the software development lifecycle.
- Integrate and automate SAST, SCA, secrets-scanning, and vulnerability management tooling within CI/CD pipelines.
- Build AI-assisted capabilities for vulnerability analysis, prioritization, exploitability assessment, reachability analysis, and remediation.
- Develop security guardrails and runtime controls for AI-enabled and LLM-powered applications.
- Support the implementation of AI Security Posture Management (AI-SPM) and AI asset inventory capabilities.
- Automate security processes and enhance developer self-service security experiences.
- Collaborate with development, security, and platform engineering teams to improve secure software delivery.
- Contribute to AI security standards, ML SecOps practices, and secure AI development guidelines.
- Evaluate and integrate emerging security and AI technologies to strengthen enterprise security capabilities.

What You Bring to the Table
- Bachelor's degree in Computer Science, Cybersecurity, Software Engineering, or equivalent experience.
- Extensive experience in software development with a strong emphasis on Python.
- Proven experience in Application Security and secure software development practices.
- Strong understanding of cloud-native architectures and cloud security principles.
- Excellent analytical, problem-solving, and communication skills.
- Ability to collaborate effectively with multidisciplinary teams in Agile environments.
- Strong focus on automation, scalability, and operational efficiency.

Core Skills Required
- Advanced Python development experience, including API development, scripting, automation, and systems integration.
- Deep knowledge of Application Security (AppSec) principles and practices.
- Experience implementing security controls within CI/CD and DevSecOps pipelines.




- Hands-on experience applying AI and LLM technologies to Application Security initiatives.
- Experience with:
- AI-assisted SAST and SCA
- Secrets scanning
- Vulnerability prioritization
- Exploitability and reachability analysis
- Attack path analysis
- Automated remediation

- Knowledge of LLM architectures, AI agents, and Retrieval-Augmented Generation (RAG) solutions.
- Understanding of prompt security, model security, AI guardrails, runtime protection, and AI model lifecycle security.
- Experience developing or integrating AI-powered security tools and capabilities.
- Strong knowledge of cloud security and modern application architectures.

Our Stack
- Languages: Python, Java (nice to have)
- Security Tooling: SAST, SCA, Secrets Scanning, Vulnerability Management Platforms
- AI & Security: LLMs, AI Agents, RAG Architectures, AI Security Controls
- DevSecOps: CI/CD Pipelines, Security Automation, Infrastructure Integration
- Cloud: Cloud-Native Platforms and Security Services
- Development Practices: Agile, DevSecOps, Secure SDLC, ML SecOps

Why Join Highspring?
- Work with a dynamic and growing team of highly skilled consultants, developers, and security professionals.
- Contribute to innovative, high-impact security and AI initiatives.
- Help shape the future of secure AI adoption within enterprise environments.
- Access continuous learning, certifications, and professional development opportunities.
- Enjoy flexible work arrangements and a collaborative, technology-focused culture.

Equal Opportunity Notice Highspring LLC (d/b/a Vaco by Highspring) and its parents, affiliates, and subsidiaries ("we," "our," or "Vaco by Highspring") are committed to the full inclusion of all qualified individuals and does not discriminate against any employee or applicant for employment because of race (including but not limited to traits historically associated with race such as hair texture and hair style), color, sex (includes pregnancy or related conditions), religion or creed, national origin, citizenship, age, disability, status as a veteran, union membership, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, political affiliation, or any other protected characteristics as required by applicable law. The company is also committed to ensuring that persons who need them are provided with reasonable accommodations; if an accommodation is needed to participate in the job application or interview process, please contact [email protected]

.

Vaco by Highspring also wants all applicants to know their rights that workplace discrimination is illegal .

Representation Notice

By submitting to this position,



you agree that you will be giving Vaco by Highspring the exclusive right to present your as a candidate for the foregoing employment opportunity. Additionally, you agree to be included in our talent pool for future hiring for similarly qualified positions. You further agree that you have represented information about yourself accurately and have not affirmatively misrepresented your qualifications.

Lastly, you agree to maintain as confidential, to the fullest extent permitted by law, any information you learn from Vaco by Highspring about the position and you will limit disclosure of information about the position only to the extent necessary to perform any obligations in furtherance of your application. In exchange, Vaco by Highspring agrees to exercise reasonable efforts to represent you through all solicitation, job screening and resume dispersal.

For residents of Ontario, Canada only: to the extent the position for employment is not with Highspring or not otherwise noted as vacant above, candidate should be informed that this role is to replace a presently employed person at Vaco by Highspring's client.

Privacy Notice

Vaco by Highspring respects your privacy and are committed to providing transparent notice of our policies.

- California residents may access Vaco by Highspring HR Notice at Collection for California Applicants and Employees here .
- Virginia residents may access our state specific policies here .
- Residents of all other states may access our policies here .
- Canadian residents may access our policies in English here and in French here .
- Residents of countries governed by GDPR and UK GDPR may access our policies here .

Additionally, submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. More details about Vaco by Highspring's use of AI can be found here ( https://www.highspring.com/ai-use-notices/ ).

Further assessment of candidates beyond this initial phase will be conducted by recruiters and hiring managers. Vaco by Highspring does not know and cannot opine on if its client's use of AI products in hiring.

Pay Transparency Notice

Determining compensation for this role (and others) at Vaco by Highspring depends upon a wide array of factors including but not limited to:

· the individual's skill sets, experience and training;

· licensure and certification requirements;

· office location and other geographic considerations; and

· other business and organizational needs.

With that said, as required by local law, Vaco by Highspring believes that the following salary range referenced above reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure. The individual may also be eligible for discretionary bonuses and/or participation in medical, dental, and vision benefits as well as the company's retirement plan (or similar retirement advantages).

📌 Application Security Developer - Python/Java (Greater Toronto Area)
🏢 Vaco by Highspring
📍 Greater Toronto Area