Apply penetration testing and secure code review expertise as an Application Security Engineer at TMX, supporting products across global capital markets.
This Application Security Engineer implements TMX’s Application Security Programme through secure architecture, vulnerability identification, and security assessments. The work partners with development, product, and DevOps teams while addressing web application, cloud, and microservices security. You will communicate findings clearly and support secure coding practices.
Key Responsibilities: Lead application security testing across the product suite
Perform code reviews for flaws and attack vectors
Identify vulnerabilities through penetration testing and threat modeling
Guide vulnerability tracking, remediation,
and risk management
Automate security tests within CI/CD pipelines
Requirements: Three-plus years of application security engineering experience ideally
Hands-on penetration testing and security code review experience
Knowledge of OWASP Top 10 and CWE Top 25
Proficiency with C++, C#, Python, or JavaScript
Expertise using Burp Suite, SQLmap, Wireshark, SAST, and DAST tools
Bring application security, penetration testing, and secure coding expertise to strengthen TMX products and development practices.