Job Title: Senior .NET Engineer with Experience in Vulnerability Fixes

Location: Remote in Canada

Duration: Long-term contract

Rate: CAD60-CAD63/hr

Job Summary

We are seeking a Senior .NET Engineer with strong expertise in application security, vulnerability remediation, and secure software development. The ideal candidate will have extensive experience analyzing and remediating security vulnerabilities identified through DAST, SAST, and SCA tools across enterprise-scale .NET applications, APIs, and cloud-hosted platforms.

This role requires hands-on experience with security remediation initiatives, OWASP Top 10 vulnerability fixes, secure coding practices, DevSecOps, and AI-assisted development tools. The successful candidate will work directly with security, engineering, and client teams to identify, analyze, and remediate vulnerabilities while improving the overall security posture of mission-critical applications.

Key Responsibilities

- Analyze, prioritize, and remediate vulnerabilities identified through DAST, SAST, and SCA security assessment tools.
- Review and interpret security scan reports and perform root-cause analysis of application security findings.
- Design, develop, and maintain secure .NET applications, APIs, and cloud-based services.
- Implement fixes for OWASP Top 10 vulnerabilities and other security-related findings across web applications and APIs.
- Perform secure code reviews and ensure compliance with secure coding standards and best practices.
- Collaborate with security teams, architects, developers, and application owners to resolve security risks and compliance requirements.
- Support and secure internet-facing applications, APIs, microservices, and enterprise integrations.
- Integrate security testing and validation into CI/CD pipelines and DevSecOps workflows.
- Validate remediation efforts through re-scans, penetration testing support, and security verification activities.
- Document security findings,



remediation approaches, root-cause analyses, and lessons learned.
- Provide technical guidance and mentoring to development teams on secure software engineering practices.
- Partner directly with client stakeholders to communicate remediation status, security risks, and mitigation strategies.
- Utilize AI-assisted development and security tools to accelerate vulnerability analysis, remediation, code reviews, and developer productivity.

Required Qualifications

- 8+ years of hands-on experience in .NET software development using C#, ASP.NET, .NET Core, and Web APIs.
- Strong experience identifying and remediating application security vulnerabilities.
- Hands-on experience with one or more security testing tools:
- AppScan
- Checkmarx
- SonarQube
- Veracode
- Fortify
- Snyk
- Black Duck
- Similar DAST/SAST/SCA platforms
- Proven track record of remediating:
- SQL Injection
- Cross-Site Scripting (XSS)
- Cross-Site Request Forgery (CSRF)
- Authentication & Authorization Issues
- Sensitive Data Exposure
- Security Misconfigurations
- API Security Vulnerabilities
- OWASP Top 10 Findings
- Experience supporting internet-facing enterprise applications and APIs.
- Strong understanding of application security principles and secure coding practices.
- Experience working with Azure, AWS, or other cloud-hosted environments.
- Robust troubleshooting, debugging, and root-cause analysis skills.
- Excellent communication and stakeholder management abilities.

Preferred Qualifications

- Experience implementing DevSecOps practices within CI/CD pipelines.
- Hands-on experience with GitHub Actions, Azure DevOps, Jenkins, or similar build platforms.
- Experience with container security, Kubernetes, and cloud-native application security.
- Knowledge of OAuth, OpenID Connect, JWT, RBAC, and Identity Management.
- Experience supporting highly regulated environments such as Banking, Financial Services, Healthcare, or Insurance.
- Familiarity with threat modeling and security architecture principles.

📌 Senior .NET Engineer (Canada)
🏢 Hays
📍 Canada