Apply penetration testing and secure code review expertise as an Application Security Engineer at TMX, supporting products across global capital markets.

This Application Security Engineer implements TMX’s Application Security Programme through secure architecture, vulnerability identification, and security assessments. The work partners with development, product, and DevOps teams while addressing web application, cloud, and microservices security. You will communicate findings clearly and support secure coding practices.

Key Responsibilities:

- Lead application security testing across the product suite
- Perform code reviews for flaws and attack vectors
- Identify vulnerabilities through penetration testing and threat modeling
- Guide vulnerability tracking, remediation,



and risk management
- Automate security tests within CI/CD pipelines

Requirements:

- Three-plus years of application security engineering experience ideally
- Hands-on penetration testing and security code review experience
- Knowledge of OWASP Top 10 and CWE Top 25
- Proficiency with C++, C#, Python, or JavaScript
- Expertise using Burp Suite, SQLmap, Wireshark, SAST, and DAST tools

Bring application security, penetration testing, and secure coding expertise to strengthen TMX products and development practices.

📌 Application Security Engineer Penetration Testing (Toronto)
🏢 TMX
📍 Toronto