Who We Are

Every transaction matters. Every Canadian matters. At Interac, we protect both — driving trust, security, and inclusion, so our digital economy thrives. Founded in 1984, Interac connects Canadians through secure digital payments, advanced identity verification and industry-leading fraud protection. Connecting banks, businesses, and individuals, Interac enables millions to send, receive, and manage money safely and effortlessly every day — across both digital and physical environments. As the backbone of Canada’s financial ecosystem, Interac facilitates over 20 million transactions daily, supported by trusted partnerships with government and financial institutions. Consistently ranked as Canada’s most reputable financial technology brand, Interac is deeply embedded in the daily lives of Canadians.

Who You Will Work With

The Application Security, Senior Specialist will play a critical role in safeguarding our ecosystem by ensuring that our applications are designed, built, and deployed securely. You will work closely with engineering, product, cloud, and security teams to embed security into the software development lifecycle, model threats associated with the application, identify and assist engineering in mitigating vulnerabilities during build, reduce security defects into prod, and champion secure‑by‑design principles across the organization.

Secure Development Lifecycle (SDLC) Enablement

Embed security controls and best practices into all phases of the SDLC. Conduct secure design reviews, threat modeling, and architecture assessments for current and existing applications. Partner with engineering teams to ensure secure coding practices and frameworks are consistently applied. Provide guidance on secure API design,



microservices security, and cloud‑native application patterns.

Vulnerability Identification & Remediation

Perform application security assessments, including static/dynamic analysis, dependency scanning, and manual code review. Triage, prioritize, and track remediation of vulnerabilities across web, mobile, and backend systems. Collaborate with development teams to provide actionable remediation guidance and validate fixes. Support penetration testing activities and coordinate follow‑up actions.

Security Tooling, Automation & DevSecOps

Maintain and optimize AppSec tools such as SAST, SCA, DAST, secrets scanning, and container security platforms. Integrate security tooling into CI/CD pipelines to enable automated, scalable security testing. Identify opportunities to improve automation, reduce friction, and enhance developer experience.

Risk Assessment, Governance & Compliance

Assess application‑level risks and contribute to enterprise risk reporting. Ensure application security practices align with regulatory requirements and industry standards (e.g., PCI DSS, SOC2, OWASP). Support audit activities by providing evidence, documentation, and subject‑matter expertise.

Cross‑Functional Collaboration & Security Advocacy

Act as a trusted advisor to engineering, product, and cloud teams on application security matters. Deliver training, workshops,



and secure coding sessions to elevate security awareness across the organization. Communicate complex security issues in a clear, actionable way to both technical and non‑technical stakeholders. Stay current with emerging threats, vulnerabilities, and security technologies, and proactively assess their impact on the organization.

What You Bring

- 5+ years of experience in application security, software security engineering, or related roles within FinTech, SaaS, or cloud‑native environments.
- Strong understanding of modern application architectures (microservices, APIs, containers, serverless).
- Expertise in DevSecOps practices and SSDLC frameworks.
- Hands‑on experience with SAST, SCA, DAST, secrets scanning, and CI/CD security tooling.
- Proficiency in at least one programming language (e.g., Java, Python, JavaScript, Go) and familiarity with secure coding practices.
- Experience performing threat modeling, code reviews, and vulnerability assessments.
- Knowledge of cloud security principles (AWS, Azure, or GCP).
- Familiarity with OWASP Top10, CWE, NIST, and other security frameworks.
- Strong communication skills and the ability to influence without authority.
- A proactive, problem‑solving mindset and a passion for building secure, resilient systems.
- Cybersecurity certifications such as CISSP, CSSLP, CCSP, OSCP.
- Eligibility to work for Interac Corp. in Canada in a full‑time capacity.

What We’re Offering

The hiring range for this position is $85,000 - $105,000, and you will also be eligible for our short-term incentive plan. The exact amount will depend on factors such as skills, experience, and job-related knowledge

📌 Application Security, Senior Specialist (Toronto)
🏢 Interac
📍 Toronto