Application Security Engineer at TMX applies secure coding and penetration testing expertise to protect critical capital markets systems. This position supports application security across product teams.You will implement TMX’s Application Security Programme while partnering with development, product, and DevOps teams. The work includes secure architecture, code reviews, vulnerability management, and security testing.
You will communicate technical findings clearly and guide remediation through established risk processes.Key Responsibilities:
Lead application security testing across the product suiteDesign secure application architectures meeting business requirementsReview code for flaws, errors,
and attack vectorsTrack vulnerabilities and support successful remediationMaintain application security metrics and documentationRequirements:
Three or more years of application security experience preferredKnowledge of OWASP Top 10 and CWE Top 25Experience with penetration testing and secure code reviewsProficiency in C++, C#, Python, or JavaScriptWorking knowledge of cloud, microservices, and CI/CD environmentsApply application security engineering, vulnerability assessment, and secure development expertise across TMX’s critical systems.